Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [nmap]

Nmap (Network Mapper) is a security scanner originally written by Gordon Lyon (also known by his pseudonym Fyodor Vaskovich) used to discover hosts and services on a computer network, thus creating a "map" of the network.

250 questions
3
votes
2 answers

How to defeat NMAP's TCP/IP fingerprinting method for OS-detection

I want to evade nmap's TCP/IP fingerprinting, which it uses to detect the OS on a machine. I read A practical approach for defeating Nmap OS-Fingerprinting which explains how this can be done. It also suggests a few programs which can do this. Most…
arne.z
  • 357
  • 6
  • 24
3
votes
1 answer

Fast and reliable way to scan a Class B network using nmap

I need to nmap scan a class B network within a short span of time. The requirements are quite straightforward. I want to: Scan as fast as possible Fulfill point 1 while maintaining reliability (Missing 1/2 out of 10 is acceptable) Fulfill point 1…
akgren_soar
  • 181
  • 2
  • 7
3
votes
2 answers

Port 80 filtered nmap

Suddenly my server's port 80 is shown as filtered (no server changes are made). My sites are sometimes timing out or stays in waiting for a very long time (in browser). Nmap localhost output is below, Starting Nmap 5.51 ( http://nmap.org ) at…
Praveen
  • 141
  • 2
  • 7
3
votes
1 answer

Can a port be in the listen state and be closed?

Servers running Debian7.7, Mongodb 1.2.0.6-1.1, Nmap6.0 - Thanks for your time. I've user who can't connect to mongodb from his Win7 desktop. He has mongodb installed on it and he's trying to connect from the CML. There's no firewall between the…
mojo.average
  • 33
  • 4
3
votes
1 answer

HTTP Ports are Filtered on New Virtual IPs in LVS (Linux Virtual Server) Load Balancer

I inherited a Linux Virutal Server (LVS) load balancer on CentOS 5.10. Its been running with no issues for quite some time with no worries. Now when I add a new virutal IP (VIP), all HTTP traffic is "filtered" to that port. For example: Here's…
Michael J
  • 133
  • 6
3
votes
1 answer

Detect if remote host is running Windows or Samba

From a Linux server, how can I quickly determine if a remote machine is running Windows or Samba? I want to run commands on remote Windows machines (XP and 7) to list the installed software and versions. And I want to run these commands from a Linux…
mivk
  • 3,457
  • 1
  • 34
  • 29
3
votes
3 answers

VirtualBox guest responds to ping but all ports closed in nmap

I want to setup a test database on a vm for development purposes but I cannot connect to the server via the network. I've got Ubuntu 12.04vm installed on 12.04 host in Virtualbox 4.2.4 set to - Bridged network mode - Promiscuous Allow All When I…
jeremyjjbrown
  • 131
  • 1
  • 6
3
votes
2 answers

Weird Port scanning results using nmap

I was scanning one of my friends servers using nmap and got these port details. PORT STATE SERVICE 22/tcp open ssh 42/tcp filtered nameserver 80/tcp open http 111/tcp open rpcbind 135/tcp filtered msrpc 139/tcp …
user994535
  • 133
  • 1
  • 3
3
votes
1 answer

NMap route determination on Windows 7 x64

C:\Windows\system32>nmap --iflist Starting Nmap 6.01 ( http://nmap.org ) at 2012-08-31 06:51 Central Daylight Time ************************INTERFACES************************ DEV (SHORT) IP/MASK TYPE UP MTU MAC eth0…
user30772
  • 31
  • 3
3
votes
3 answers

How to list down hosts with nmap 5.51

I was using nmap 5.21 with the -PN, -F and --reason flags in version 5.21. I was outputting the results to an XML file. It would list ALL hosts (say I gave it a /24 subnet to scan. I then updated to 5.51 and ran the exact same command, but it no…
Wild Bill
  • 227
  • 2
  • 4
  • 10
3
votes
1 answer

Powershell and NMAP Information Sharing

I am working on a project where I would like to perform host documentation for a variety of items. Part of these items would be sourced from Powershell and the rest would be sourced from NMAP. For the Powershell part, I am working on trying to…
John
  • 2,266
  • 6
  • 44
  • 60
3
votes
1 answer

Identify where a port is blocked

I'm trying to find out where a port is being blocked by a firewall; either en-route to a host or by the host itself. If I run nmap I can see that the port is filtered. However, this could mean by the host 192.168.1.74 or any firewall in between. Is…
Joel
  • 459
  • 2
  • 6
  • 12
3
votes
1 answer

Allow nmap advanced scans for a normal user

I want to allow a normal user to run NMAP's advanced scans like XMAS, TCP FIN, TCP NULL scans. Can somebody please tell me how to do that ?? Since it uses raw packets so whether setting the setuid bit will work or not ?
pradeepchhetri
  • 2,518
  • 6
  • 33
  • 45
3
votes
1 answer

Why does nmap report different results from localhost?

When I execute "nmap -sT -O localhost" per the Centos 5 deployment guide, I get: Not shown: 1677 closed ports PORT STATE SERVICE 22/tcp open ssh 80/tcp open http 8080/tcp open http-proxy which makes sense. But when I execute "sudo nmap…
Sean DeNigris
  • 133
  • 1
  • 5
3
votes
4 answers

iptables rule to drop SYN and FIN attacks

From a Trustwave report, we are trying to set our server to block this type of request but after trying several combinations of rules, we can still see the ports. Could anyone give me a hint or the set of necessary rules to block this request? I'm…
shadow_of__soul
  • 376
  • 1
  • 6
  • 16
1 2
3
…
16 17