Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

while running:
nmap -n -PN -sT -T4 -p 445,139 10.0.40.0/24 i get:

Interesting ports on 10.0.40.6:
PORT STATE SERVICE
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds

if I specifically scan a single ip

nmap -n -PN -sT -T4 -p 445,139 10.0.40.6
Interesting ports on 10.0.40.6:
PORT STATE SERVICE
139/tcp open netbios-ssn
445/tcp open microsoft-ds

why there is a difference?

Note:
if I omit the -sT from the sub net scan I get: PORT STATE SERVICE
139/tcp open netbios-ssn
445/tcp open microsoft-ds

share|improve this question

2 Answers 2

They should be identical. I am thinking that maybe it has something to do with latency/scan timeout. Are the results the same if you try a different scan type, and a slower scan time?

share|improve this answer
    
thanks @gerryk , i thought so to , but isn't nmap suppose to handle slow connection , running the command from the same subnet being tested result in open connection found –  modi Apr 12 '11 at 10:51

-sT is an ACK scan. Well it is in some way trying to stay under a remote log's radar... So the router might detect that you are doing something weird and is filtering you out. Perhaps you could either drop (-sT) from your options or use a SYN scan(-sS).

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.