Nmap (Network Mapper) is a security scanner originally written by Gordon Lyon (also known by his pseudonym Fyodor Vaskovich) used to discover hosts and services on a computer network, thus creating a "map" of the network.
Questions tagged [nmap]
255 questions
2
votes
1 answer
How to setup nmap ping count?
I need an arp-ping tool for windows
Tried arp-ping http://www.elifulkerson.com/projects/arp-ping.php.
Source address specification did not work in this tool.
Then I came across nmap. -PR option suits my needs and it works.
My arp ping example…
Siva R
- 45
- 1
- 6
2
votes
0 answers
Logstash nmap codec @timestamp match
I am using Logstash to input NMAP scan data into Elasticsearch.
input{
http{
host => "127.0.0.1"
port => 8000
codec => nmap
}
}
filter{
date{
match => […
user79067
- 33
- 3
2
votes
4 answers
Port-scanning on Cisco router with Nmap
I have Cisco 2911 router just booted with factory settings and no ACLs or NAT configured. All I did is turned on the interfaces and assigned IPs.
I am trying to scan for open ports with Nmap, but the output shows that all ports are closed.
So I…
ScienceSamovar
- 123
- 1
- 3
2
votes
1 answer
How to interpret nmap result, host up but no ports open
I have used nmap to map a network, scanning using the following command
nmap -v -sS --no-stylesheet -T3 -sU -sV -O -oX 192.168.69.0/24
Some of the hosts come back with a strange result. Nmap reckons they are up due to syn-ack. I…
Slicedpan
- 201
- 1
- 3
- 10
2
votes
3 answers
Why does nmap send two packets in order to test a single port
I run nmap with root privileges using sudo so I assume it has full access to creat raw sockets. Wireshark shows two packets used to test a single port when I used the command
sudo nmap 192.168.110.153 -p21
Is that normal behavior? why?
sudo nmap…
Matka
- 107
- 1
- 12
2
votes
1 answer
How to test iptables settings by port scanning?
I want to test my iptables and prove that it only allows traffic for given Protocol / Port - combinations. How I can use as a target for a port scan?
vinzBad
- 133
- 8
2
votes
2 answers
nmap results to find open ports for SIP
I suspect that a firewall, or other security, on either the router, or on tleilax or doge is causing a problem with SIP calls. How do I establish that the connection is allowed and not being blocked?
I just want to make a SIP call from 192.168.1.3…
Thufir
- 229
- 7
- 18
2
votes
1 answer
How to reverse arp using nping for Windows
I would like to send a reverse ARP to resolve an IP address given a MAC address using nping for Windows.
The documentation is not clear on how this should work and I'm unable to find any examples online. Can anybody assist?
Here is what I have…
PaulH
- 181
- 1
- 3
- 8
2
votes
1 answer
Can a port be in the listen state and be closed?
Servers running Debian7.7, Mongodb 1.2.0.6-1.1, Nmap6.0 - Thanks for your time.
I've user who can't connect to mongodb from his Win7 desktop. He has mongodb installed on it and he's trying to connect from the CML. There's no firewall between the…
mojo.average
- 23
- 4
2
votes
1 answer
nmap: why is it scanning port 80 with TCP ACK and not SYN?
While reading nmap man pages, I read for the -sn option:
The default host discovery done with -sn consists of an ICMP echo request,
TCP SYN to port 443, TCP ACK to port 80, and an ICMP timestamp request
by default.
I don't understand well the…
philippe
- 2,303
- 4
- 32
- 53
2
votes
2 answers
How do I test my firewall rules?
I've setup some rules in ufw on a remote server and I've turned the firewall on. Now I want to ensure my rules actually block traffic. However, when running nmap -PN -p from my local workstation it appears the port I'm blocking is…
Dane O'Connor
- 1,269
- 2
- 15
- 20
2
votes
1 answer
nmap lists host as up despite being black listed
I have an iptables rule setup that marks addresses as suspicious if they connect on certain ports or any unopen ports. If more than three consecutive connections are made without authentication, then the address is black listed. After blacklisting…
Craig
- 151
- 6
2
votes
1 answer
Trace /8 address space with nmap
I'm trying to sketch out a network topology map using the following command
nmap -sP -PE -PS22,25,80 -PA21,23,80,3389 -PU -PO -oX topology.xml --traceroute 10.0.0.0/8
(10.0.0.0/8 because no one knows what's on there right now, that's part of the…
fy_iceworld
- 121
- 2
2
votes
4 answers
Ping only OS Detection with nmap?
I am interested in using nmap for discovery, and to figure out the OS of each host. I understand that nmap does this, and can be enabled and controlled as described in the man page:
OS detection is enabled and controlled with the following…
MattUebel
- 927
- 4
- 13
- 32
2
votes
3 answers
how can I view all of the machine/host names on a network
I am trying to find a reliable way to view all of the host/machine names on a local network, so for instance "Jim's Ipad" or "Austi's IMac". At the moment the only way I can do it is by looking through the dhcp request logs which usually shows the…
lacrosse1991
- 1,437
- 5
- 20
- 26