Nmap (Network Mapper) is a security scanner originally written by Gordon Lyon (also known by his pseudonym Fyodor Vaskovich) used to discover hosts and services on a computer network, thus creating a "map" of the network.
Questions tagged [nmap]
250 questions
3
votes
2 answers
How to defeat NMAP's TCP/IP fingerprinting method for OS-detection
I want to evade nmap's TCP/IP fingerprinting, which it uses to detect the OS on a machine. I read A practical approach for defeating Nmap OS-Fingerprinting which explains how this can be done. It also suggests a few programs which can do this. Most…
![](../../users/profiles/336012.webp)
arne.z
- 357
- 6
- 24
3
votes
1 answer
Fast and reliable way to scan a Class B network using nmap
I need to nmap scan a class B network within a short span of time. The requirements are quite straightforward. I want to:
Scan as fast as possible
Fulfill point 1 while maintaining reliability (Missing 1/2 out of 10 is acceptable)
Fulfill point 1…
![](../../users/profiles/383142.webp)
akgren_soar
- 181
- 2
- 7
3
votes
2 answers
Port 80 filtered nmap
Suddenly my server's port 80 is shown as filtered (no server changes are made). My sites are sometimes timing out or stays in waiting for a very long time (in browser).
Nmap localhost output is below,
Starting Nmap 5.51 ( http://nmap.org ) at…
![](../../users/profiles/150672.webp)
Praveen
- 141
- 2
- 7
3
votes
1 answer
Can a port be in the listen state and be closed?
Servers running Debian7.7, Mongodb 1.2.0.6-1.1, Nmap6.0 - Thanks for your time.
I've user who can't connect to mongodb from his Win7 desktop. He has mongodb installed on it and he's trying to connect from the CML. There's no firewall between the…
![](../../users/profiles/267691.webp)
mojo.average
- 33
- 4
3
votes
1 answer
HTTP Ports are Filtered on New Virtual IPs in LVS (Linux Virtual Server) Load Balancer
I inherited a Linux Virutal Server (LVS) load balancer on CentOS 5.10. Its been running with no issues for quite some time with no worries.
Now when I add a new virutal IP (VIP), all HTTP traffic is "filtered" to that port.
For example: Here's…
![](../../users/profiles/189758.webp)
Michael J
- 133
- 6
3
votes
1 answer
Detect if remote host is running Windows or Samba
From a Linux server, how can I quickly determine if a remote machine is running Windows or Samba?
I want to run commands on remote Windows machines (XP and 7) to list the installed software and versions. And I want to run these commands from a Linux…
![](../../users/profiles/63361.webp)
mivk
- 3,457
- 1
- 34
- 29
3
votes
3 answers
VirtualBox guest responds to ping but all ports closed in nmap
I want to setup a test database on a vm for development purposes but I cannot connect to the server via the network.
I've got Ubuntu 12.04vm installed on 12.04 host in Virtualbox 4.2.4 set to
- Bridged network mode
- Promiscuous Allow All
When I…
![](../../users/profiles/127267.webp)
jeremyjjbrown
- 131
- 1
- 6
3
votes
2 answers
Weird Port scanning results using nmap
I was scanning one of my friends servers using nmap and got these port details.
PORT STATE SERVICE
22/tcp open ssh
42/tcp filtered nameserver
80/tcp open http
111/tcp open rpcbind
135/tcp filtered msrpc
139/tcp …
![](../../users/profiles/136006.webp)
user994535
- 133
- 1
- 3
3
votes
1 answer
NMap route determination on Windows 7 x64
C:\Windows\system32>nmap --iflist
Starting Nmap 6.01 ( http://nmap.org ) at 2012-08-31 06:51 Central Daylight Time
************************INTERFACES************************
DEV (SHORT) IP/MASK TYPE UP MTU MAC
eth0…
![](../../users/profiles/134241.webp)
user30772
- 31
- 3
3
votes
3 answers
How to list down hosts with nmap 5.51
I was using nmap 5.21 with the -PN, -F and --reason flags in version 5.21. I was outputting the results to an XML file. It would list ALL hosts (say I gave it a /24 subnet to scan. I then updated to 5.51 and ran the exact same command, but it no…
![](../../users/profiles/109759.webp)
Wild Bill
- 227
- 2
- 4
- 10
3
votes
1 answer
Powershell and NMAP Information Sharing
I am working on a project where I would like to perform host documentation for a variety of items. Part of these items would be sourced from Powershell and the rest would be sourced from NMAP. For the Powershell part, I am working on trying to…
![](../../users/profiles/60455.webp)
John
- 2,266
- 6
- 44
- 60
3
votes
1 answer
Identify where a port is blocked
I'm trying to find out where a port is being blocked by a firewall; either en-route to a host or by the host itself.
If I run nmap I can see that the port is filtered. However, this could mean by the host 192.168.1.74 or any firewall in between. Is…
![](../../users/profiles/11776.webp)
Joel
- 459
- 2
- 6
- 12
3
votes
1 answer
Allow nmap advanced scans for a normal user
I want to allow a normal user to run NMAP's advanced scans like XMAS, TCP FIN, TCP NULL scans.
Can somebody please tell me how to do that ?? Since it uses raw packets so whether setting the setuid bit will work or not ?
![](../../users/profiles/95256.webp)
pradeepchhetri
- 2,518
- 6
- 33
- 45
3
votes
1 answer
Why does nmap report different results from localhost?
When I execute "nmap -sT -O localhost" per the Centos 5 deployment guide, I get:
Not shown: 1677 closed ports
PORT STATE SERVICE
22/tcp open ssh
80/tcp open http
8080/tcp open http-proxy
which makes sense. But when I execute "sudo nmap…
![](../../users/profiles/83949.webp)
Sean DeNigris
- 133
- 1
- 5
3
votes
4 answers
iptables rule to drop SYN and FIN attacks
From a Trustwave report, we are trying to set our server to block this type of request but after trying several combinations of rules, we can still see the ports.
Could anyone give me a hint or the set of necessary rules to block this request?
I'm…
![](../../users/profiles/46260.webp)
shadow_of__soul
- 376
- 1
- 6
- 16