Nmap ("Network Mapper") is an open source tool for network exploration and security auditing.

learn more… | top users | synonyms

1
vote
2answers
17 views

Nmap runs slower as root than normal user

I am working on a bash script to enable automatic detection and remote control of my company's proprietary data recorders. The recorders run a custom version of linux and are essentially powerful pis ...
1
vote
2answers
4 views

Nmap's options beginning with P

Recently, I've been learning details about nmap scanner, with the help of tcpdump and wireshark. In order to find underlying behavior on nmap, I specified a dummy port 9527 and a command line like ...
0
votes
1answer
17 views

how to print pattern match

I am trying to get versions for services in a gnmap file. A typical line looks like: Host: 192.x.x.x () Ports: 21/open/tcp//ftp//HP JetDirect ftpd/, 23/open/tcp//telnet//HP JetDirect printer ...
0
votes
1answer
19 views

Nmap random ip address scan order

There is an -iR, which allows to scan completely random hosts on the internet, but how do I scan, for example, a random subset of 10.0.0.0/8?
0
votes
0answers
105 views

VMWare Player bridged guests can't see host on network

I have a Windows 7 Ultimate 64-bit machine running 3 VM's on VMWare Player 6.0.3. The host is not able to communicate with the guest machines, however the guests are able to communicate with all other ...
1
vote
2answers
46 views

Find new ips on network

The solution I want to solve is to discover newly connected ip (and preferably mac and vendor) on the local network. So far I've tried arp-scan and nmap. I like arp-scan mainly because it's fast ...
0
votes
1answer
352 views

nmap output difference between -sL and -sP

I am trying to generate a list of currently active hosts. I get this by doing -sP 192.168.1.0/24 Starting Nmap 6.40 ( http://nmap.org ) at 2014-09-24 19:40 MDT RTTVAR has grown to over 2.3 seconds, ...
2
votes
1answer
41 views

Nmap incredibly slow on my router

I'm attempting to use nmap on my Tomato router (Linux 2.6) to do a quick survey of a particular subnet on my LAN. Even when I set it to scan a single client it takes close to four minutes to complete. ...
0
votes
1answer
75 views

Why would an arp table be incomplete?

Last night I connected to a local BT Fon network that my housemate was already on. My aim was to find his mac address, so I did an arp -a command (from OS X) and it returned only the router address. ...
1
vote
0answers
131 views

Nmap shows 554 and 7070 open on EVERY machine even when they are closed/filtered

Every single machine I scan shows port 7070 and port 554 as open regardless if the ports are closed/filtered. It will still show those two ports as open even if the target is offline (and the scan is ...
0
votes
0answers
10 views

NMAP service probe or normal port scan

Apologies - I am very new to these things.I read that nmap-service-probes will display the service that the port is using while nmap -sS will send a stealth SYN which is also capable of ...
1
vote
1answer
133 views

nmap scan with netbios/bonjour name

Is there any fancy way in Nmap to scan hosts plus getting the netbios/bonjour name as Fing app does? I've been looking at the -A argument, it's fine but it does a lot of another scripting stuff and ...
0
votes
3answers
267 views

Nmap- what are the top 100 ports scanned

I am new to nmap and i read that you can limit the output of nmap to the top 100 ports by using the command -F such as: nmap - F <IP> My question is what are the top 100 ports. I have been ...
0
votes
1answer
40 views

zenmap/nmap vs SoftPerfect Network Scanner

Do you use both or either or neither? Which one do you like or prefer? I like the double reverse lookup feature on SoftPerfect Network Scanner. Is similar feature also available on nmap? If so, what ...
0
votes
1answer
33 views

Using nmap responsibly towards learning and understanding the restrictions to safeguard myself?

I hope this thread doesn't get yanked to fast and if you have any negative feedback for me in asking this question please take it easy on me as I'm just a beginner trying to learn more in the most ...
0
votes
1answer
229 views

Nmap OS detection outputs fingerprints only

I've tried running nmap several times for OS detection, however I never get sucess. It would output "Too many fingerprints match this host to give specific OS details", or for example, Nmap scan ...
0
votes
0answers
34 views

NMAP from windows 7 - nothing found?

Attempting to use nmap (via 'zenmap') on Win7 pro. It's telling me that no hosts are found even though I'm fairly certain all is well. What I've tried: the command line (just to be sure) - same ...
0
votes
1answer
117 views

How to get nmap to show ftp banner / welcome message?

What are the commands to get nmap to show ftp banner responses?
0
votes
0answers
150 views

nmap recognizes android device not in a scan area of more than 3 ips

this page was recommended to me by stackoverflow therefore I ask my question again here. I have performed some nmap scans, yet I have found out, that the scan over a larger area provides more ...
0
votes
0answers
20 views

nmap buffering output, any way to get faster output?

I'm running nmap against the 256 IPs on my local network. $ nmap -sS -p 80,8080,443,8888 192.168.1.1/24 | less I'd like interactive output piped to less, that I can view as the scan progresses. ...
1
vote
1answer
28 views

what's hops unity in network context

I have scanned a remote server using nmap : And i get the following OUTPUT : Network Distance: 22 hops What's hops unity? And , is there a relationship among the others unities of distance ...
0
votes
1answer
36 views

ADSL device providing No NAT DMZ alongside NAT (IPv4)

I have an ADSL modem/router/switch which performs NAT. It does this even for the one host it can be configured to provide a DMZ. I want to be able to perform Nmap scans from a specific host and there ...
1
vote
1answer
2k views

Kali Linux Can't Find Any Computer On Network

I'm trying nmap and arp. When i'm execute "arp -a" only shows myhome.mynet ([my_ip]) at [MAC_ADDRESS] [ether] on wlan0 And when i'm trying to nmap [my_ip] it shows Starting Nmap 6.40 ( ...
2
votes
2answers
868 views

Why would ping succeed but nmap fail?

Why does Nmap report "Host seems down" when a simple ping succeeds? me@computer:~$ ping 123.45.67.89 PING 123.45.67.89 (123.45.67.89) 56(84) bytes of data. 64 bytes from 123.45.67.89: icmp_req=1 ...
1
vote
1answer
48 views

How does Nmap decide which DNS servers to use?

I had a problem using Nmap which turned out to be down the list of DNS servers Nmap was using for reverse DNS. There were 2 correct DNS servers and two strange ones. The problem was solved/worked ...
2
votes
2answers
647 views

Why is Nmap slow on my Windows 8.1 laptop?

Nmap is so slow as to be almost unusable on my Windows 8.1 laptop. I'm using Nmap 6.40 and it's taking more than a minute to run a simple check that runs in a fraction of a second on other computers ...
0
votes
2answers
514 views

How can I find private IP address of a device?

I 'm trying to detect IP address of a Wireless Access Point device, connected via Ethernet on my router. Router's configuration page shows status of the Ethernet port is up, but no device connected. ...
0
votes
1answer
76 views

After I switch default SSH ports, why does NMAP display port service as “down”

Running Ubuntu 13.04, I edit sshd_config to change Port 22 to Port 2022 When I reload my sshd service and nmap the server from my local machine, I get this: PORT STATE SERVICE 2022/tcp open ...
1
vote
1answer
56 views

Linux distribution detection with Nmap

When I run Nmap with OS detection it delivers the kernel version of the Linux host instead of the name of the Distribution. Nessus does Os detection based on banners ...
0
votes
0answers
72 views

NMAP scan on a device on an external 3G network

I am getting my hands dirty my learning nmap these days. After already learning the basics, now I am trying to find the OS and other details of a device which is on an external 3g network (it is a ...
1
vote
3answers
163 views

Quick way to scan for opened ports on local network according to a list

How can I quickly find out whether port 80 is open/listening on a server via a bash script? Normally on all workstations the daemon is running, but sometimes it fails. I use the following command to ...
1
vote
1answer
359 views

Nmap doesn't perform the script supplied as an argument

I'm running Kali Linux and I'm trying to run a nmap script against a host in the lab. The command I'm entering and the output is: root@kali:/usr/share/nmap/scripts# nmap --script dns-fuzz ...
0
votes
1answer
177 views

How to get device name from scan like nmap on Linux

I know that I can use a tool like NMAP or arp-scan on Linux to identify the IP and MAC addresses of all devices on my local network. I also know that arp-scan will do a MAC address lookup to get the ...
0
votes
1answer
136 views

Nmap doesn't use the script supplied in argument

I'm running under Kali Linux and I'm trying to run a script against a host in the lab. The command I'm entering and the output is: root@kali-vm:~# nmap --script smb-enum-users.nse -p445 192.168.1.1 ...
0
votes
1answer
133 views

Reconciling nmap, fping output

I am trying to understand the local network I am on. Public IP is 23.23.23.23, say. Output of some common commands: charles@ely:~$ ip addr show 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc ...
2
votes
1answer
76 views

How to list hosts on the current network without knowing the subnet in advance?

The following 2 questions have been useful for finding hosts on a target network: - http://superuser.com/q/311019/45927 - http://security.stackexchange.com/q/36198/35859 However, answers in both ...
0
votes
0answers
23 views

Find OS by interpreting TCP/IP fingerprints when using nmap [duplicate]

When I ran the command: nmap -O ip_address to identify the OS, I got the following result: OS:SCAN(V=5.05BETA1%D=8/23%OT=22%CT=1%CU=42341%PV=N%DS=0%DC=L%G=Y%TM=4A91CB ...
0
votes
1answer
197 views

Ping via nmap all possible private IPv4 addresses

Is there any way to ping via nmap (using one command) all the possible private IPv4 addresses from: 192.168.0.0 - 192.168.255.255. The number of all combinations is 65536.
1
vote
0answers
85 views

Why will nmap not update for me?

I'm currently running nmap 6.25 on Mac OSX 10.8.5. I tried to download the pre-compiled DMG bundle for 6.40 and install it. After installation it still shows me I have 6.25: hehe~ ➙ nmap -V Nmap ...
1
vote
1answer
2k views

Setting up the metasploitable in virtualbox

I'm supposed to try and use kali to do exploits on metasploitable, but I'll burn that bridge when I get there. My question right now is: How do I set up a host only network on virtualbox? I heard ...
0
votes
1answer
256 views

what can filter a port on Fedora 19 besides router, firewall and selinux?

I am trying to use seafile which seems very nice. Unfortunately I have an issue that I fail to explain. From my two fedora 19 machines, nmap says port 12001 is filtered on the distant (say private) ...
0
votes
2answers
94 views

Is it possible to find which ip is going to a website? [closed]

We have someone that keeps trying to connect to our email host and after a few attempts of trying to log in (incorrectly) we are then blocked. We then have to call and unblock. Less then having ...
5
votes
1answer
569 views

How to easily determine, which outbound ports aren't blocked by firewall

I'm behind fairly restrictive firewall regarding ports, that can be used for connecting outside. I'm also running service on my remote box, and I want to connect to it. Problem is, that I'm unable to ...
2
votes
1answer
4k views

How does nmap calculate the difficulty of TCP sequence prediction?

I am learning how nmap operates by testing it with another workstation in my network. When I entered nmap -v -A -sS 192.xxx.xxx.xxx Part of the output produced the line below. TCP Sequence ...
1
vote
1answer
416 views

Changed port service from http to http-proxy

I have Apache running on 192.168.0.201 and listening to Port 80. namp shows me that Port 80/TCP is open and service is http. [root@desktop ~]# nmap -p 80 -sT 192.168.0.201 Starting Nmap 5.51 ( ...
1
vote
0answers
788 views

How to close suspicious port 999 garcon, is it malware?

On Mac OSX, I ran the command nmap localhost and I found I have this suspicious open port: 999/tcp open garcon Then I tried to see if there is an associated process, but nothing shows up with ...
0
votes
1answer
34 views

Nmap not returning hostnames when connected to 2 networks

I've the following configuration : 1 computeur connected a 1 network over Wifi and another network over ethernet. These 2 network are totally independant. I'm using nmap (6.00) to check which ...
1
vote
1answer
108 views

Penetration testing with WMAP, only for my domain, not the others with the same IP?

My domain got massively hacked, so I'm doing some penetration testing with it using WMAP and NMAP etc. However, I believe it's on shared hosting, so running tests on 182.34.xx.xxx (the IP address for ...
0
votes
1answer
2k views

How can I use a bash script to run nmap and capture both IP and hostname?

I want to scan my network; and return an output like this: Network Scan for 192.168.0.* 192.168.0.1 computer1 192.168.0.2 computer2 192.168.0.3 computer5 echo Network Scan nmap -sP -n ...
3
votes
1answer
7k views

How to find which ports are blocked?

I have root on two machines A and B and I would like to know which ports can't be accessed on B from A. Is there some way to run a command line application on B that listens on all ports and then run ...