31 votes
Accepted

Couldn't open a raw socket. Error: Permission denied (13)

Did you install nmap using: sudo snap install nmap or sudo apt install nmap I had this same issue, I installed using snap and was getting the same error as you. If that is the case remove the snap ...
soul's user avatar
  • 326
25 votes

Couldn't open a raw socket. Error: Permission denied (13)

You have to grant network access to nmap with: snap connect nmap:network-control
Melardev's user avatar
  • 351
11 votes

What is the difference between nmap and netstat?

Nmap is a Network mapping tool. That means it's used to discover informations about hosts on a network (their ip, open ports, etc). Whereas Netstat is a network statistic tool used to list active ...
tourdetour's user avatar
8 votes
Accepted

nmap takes minutes to scan localhost

Nmap is not the best tool to use for this. I love Nmap, and my full time job is working on and promoting it, but this is one case where it is not the best tool for the job. The Linux kernel keeps ...
bonsaiviking's user avatar
  • 1,988
7 votes

What is the difference between nmap and netstat?

Nmap and netstat have lots of features that are very different from each other, but there are some that are harder to distinguish. In the "obvious differences" category, netstat can: show currently-...
bonsaiviking's user avatar
  • 1,988
7 votes
Accepted

SSL Unsupported protocol error

The problem is that the Linux ncat server will only use TLS1.2 for SSL connections. The Windows ncat is not using TLS1.2. This causes the unsupported protocol error. I can replicate this issue using ...
ztk's user avatar
  • 313
5 votes

What is another use for port 8080/8443 other than a proxy?

Although Google would get these answers quickly, 8080 is officially recognized as HTTP Alternate of 80, essentially the same function. From Wikipedia HTTP alternate (http_alt)—commonly used for Web ...
acejavelin's user avatar
  • 6,528
5 votes

Error Nmap: 'dnet: Failed to open device wifi0' on Ubuntu (W10 bash)

Yes, generally speaking Nmap is not supported on Windows Subsystem for Linux (WSL). The WSL folks don't like statements like this, though, because support is always improving. You can track this ...
bonsaiviking's user avatar
  • 1,988
4 votes

Why does Nmap behavior vary depending on how the scanning machine is connected to the Internet?

nmap performs scans only upon the online hosts it finds online from the host list given as input, In your case 2 nmap is able to find the host online by default probing method that is ICMP which was ...
Arjun sharma's user avatar
4 votes

Using nmap to traceroute on a specific port

Nmap specifically chooses probes for traceroute from what it knows about the target, choosing probes that are most likely to make it all the way to the target. For this reason, its traceroute is not ...
bonsaiviking's user avatar
  • 1,988
4 votes
Accepted

What is the difference between nmap -D and nmap -S?

The goal of both options is similar, however -D allows you to specify a number of hosts. Therefore, according to the man page the syntax is actually slightly different than outlined by you, ie -D ...
jvda's user avatar
  • 602
4 votes
Accepted

How do I find an intermediate switch's IP address on my LAN?

Switches are "layer 2" devices that forward link-layer frames (not IP packets), so they don't need to have an IP address to do their job, and they might actually not have one – and even if ...
u1686_grawity's user avatar
3 votes
Accepted

Find forgotten IP address of bridge

First, do some broadcast and all-hosts multicast pings: ping 255.255.255.255 ping 224.0.0.1 …then look at your ARP table: arp -an Second, If that didn't work, hook up your machine directly to the ...
Spiff's user avatar
  • 105k
3 votes
Accepted

Scanning in IPv6

In IPv6 there are different kinds of addresses: Unicast adddress is the unique address of a node. Anycast address: Usually an IP prefix that is advertised from multiple locations. It relays in the ...
jcbermu's user avatar
  • 17.5k
3 votes

SSL Unsupported protocol error

Check in your /ect/ssl/openssl.conf if there is something that sets a minimum TLS version. For example I found this at the bottom of my config: [system_default_sect] MinProtocol = TLSv1.2 ...
ToastyBreadMan's user avatar
3 votes
Accepted

Windows equivalent to nmap

The Windows equivalent to nmap is nmap. You can download a pre-built installer, complete with the CLI tools and the Npcap driver needed for advanced scanning options. The reason the answerer says ...
u1686_grawity's user avatar
3 votes
Accepted

What are nmap's default timing values?

I found the followig values in the nmap-manual and nmap-book https://nmap.org/book/performance-timing-templates.html https://nmap.org/book/man-performance.html --min-hostgroup/max-hostgroup min: ...
Manuel's user avatar
  • 316
3 votes

Where is the port number listed in this command result?

On the first line, the port is 44376, correct? Yes, the local port is 44376. However, you’re looking at an established connection between your system and a remote host. Having a connection on some ...
Daniel B's user avatar
  • 63.1k
3 votes

How do I find an intermediate switch's IP address on my LAN?

Your switch is an UNMANAGED switch. There is nothing that you can configure and (obviously) it doesn't have any configuration interface which would need an IP-address.
Tonny's user avatar
  • 31.5k
3 votes
Accepted

Unable to locate IP address and open port discovered by nmap

The simplest answer is that those devices are not on your network. Your network is 192.168.1.0/24 but you told nmap to scan 192.168.0.0/16 (i.e. the whole 192.168.x.x), meaning that 99% of the ...
u1686_grawity's user avatar
2 votes

What is the recommended way to get nmap on OSX?

As of May 20, 2020, the homebrew installer fails to install something called nmap-scripts. This means nmap will work for some scans, but as you start to go deeper, you may see error messages like this:...
Greg Christopher's user avatar
2 votes
Accepted

Nmaping 127.0.0.1 vs. 192.168.1.107

A program that opens a listening socket can decide which IP addresses the service should be available on. A service that is listening on any address in 127.0.0.0/8 or ::1/128 is not (directly) ...
Daniel B's user avatar
  • 63.1k
2 votes

nmap command failing with error for ssl-enum-ciphers

Nmap 4.75 was released 8 years ago, and predates the ssl-enum-ciphers script by 2 years. The script has undergone a lot of changes and improvements since then, too, as well as 2 language version ...
bonsaiviking's user avatar
  • 1,988
2 votes

Can't ping nor nmap my own public IP address

Probably your firewall is blocking ICMP echo request (ping) requests on your public IP address. If you're connecting through a router to the internet, probably this system is running the firewall. ...
sven.to's user avatar
  • 140
2 votes

Using nmap with -sT option always shows imap and pop3 ports as opened

Apparently, that scanner/module plugs deep into the TCP/IP stack. I found that when I scan another systems, these ports are also found in open state - but they don't exist at all at the remote end. ...
roland's user avatar
  • 21
2 votes

nmap: easily Ping-Scan all addresses in my subnet

Mileage may vary, but this should work well in most circumstances... nmap -sP `hostname -I | sed 's/[0-9]\+\s/0\/24 /g'`
Sam Hall's user avatar
2 votes
Accepted

How long would it take to perform different port scans on all 65536 ports?

There can be a lot of factors involved, including link speed, duplex, minimum packet size, round trip time, the latency of the target host, whether or not an intrusion detection/prevention system is ...
Spiff's user avatar
  • 105k
2 votes
Accepted

Organizing grep with linebreaks

I would like to add a linebreak after each of the two lines. The solution to this literal problem is here. In your case: nmap -sP 192.168.1.0/24 | egrep 'MAC|report' | sed '0~2 s/$/\n/g' However I'...
Kamil Maciorowski's user avatar
2 votes
Accepted

nmap + how to detected all machines IP's with range for example 10.64.*.*

Using nmap to scan 10.64.*.* will take a lot of time as there are 4096 addresses to scan. Also, for OS detection use -O option with nmap. -sn only shows available host. You can use -v to see the ...
Chetan's user avatar
  • 61

Only top scored, non community-wiki answers of a minimum length are eligible