-1
votes
1answer
114 views

psad does not detect nmap [closed]

I am new to this and just installed psad. I ran nmap several times on a server but psad didn't log this psad --Status. I configured it like this: ...
3
votes
2answers
1k views

Test if an IP is being used in an internal network without using nmap

I can perform port scan using nmap to test if a given IP is being used, e.g. nmap -PR 192.168.1.9 However, nmap is not installed in most server, is it possible to have the same result (e.g. check ...
2
votes
2answers
756 views

Weird Port scanning results using nmap

I was scanning one of my friends servers using nmap and got these port details. PORT STATE SERVICE 22/tcp open ssh 42/tcp filtered nameserver 80/tcp open http 111/tcp open ...
0
votes
2answers
402 views

Nmap / Batch: alert if only ports usually closed are opened?

Context I check open ports on my server with a scheduled batch file: nmap.exe server1 server2 server3 etc >> log.txt Usually 21, 22, 80, 443 and 3389 are opened. Now I want to send an email ...
2
votes
1answer
2k views

Why does nmap report different results from localhost?

When I execute "nmap -sT -O localhost" per the Centos 5 deployment guide, I get: Not shown: 1677 closed ports PORT STATE SERVICE 22/tcp open ssh 80/tcp open http 8080/tcp open http-proxy ...
0
votes
3answers
841 views

Is it dangerous to allow every user to run nmap as root?

At our university we have some computers in the "networking lab", that are configured to allow everybody to run nmap as root via /etc/sudoers. Could this be a security vulnerability?