Nmap (Network Mapper) is a security scanner originally written by Gordon Lyon (also known by his pseudonym Fyodor Vaskovich) used to discover hosts and services on a computer network, thus creating a "map" of the network.

learn more… | top users | synonyms

-1
votes
1answer
38 views

Nmap how to split and filter this(regex)?

I think i need a regex code to filter nmap output.txt I use a tool called: Word List Updater 2.7 so this is the output: http://pastebin.com/HwgiVHDA I want to filter,remove duplicates and look like ...
0
votes
1answer
22 views

IPTables Policy INPUT DROP but accepts connection

I configured iptables with the following rules: iptables -I INPUT -p tcp --dport 22 -j ACCEPT iptables -P INPUT DROP iptables -A INPUT -p tcp --dport 80 -j ACCEPT iptables -A INPUT -p tcp --dport 443 ...
0
votes
1answer
25 views

Port Scanning Large Sets of Targets

1)How would you check to see if a list of ~10000 IPs if they have port 80 open? 2)How would you go about the same scenario but with a port range? 3)How would you check a list of 10000 IPs to see ...
2
votes
3answers
3k views

How to list down hosts with nmap 5.51

I was using nmap 5.21 with the -PN, -F and --reason flags in version 5.21. I was outputting the results to an XML file. It would list ALL hosts (say I gave it a /24 subnet to scan. I then updated ...
1
vote
1answer
210 views

Port 80 filtered nmap

Suddenly my server's port 80 is shown as filtered (no server changes are made). My sites are sometimes timing out or stays in waiting for a very long time (in browser). My 1&1 tech support is of ...
1
vote
1answer
3k views

How to reverse arp using nping for Windows

I would like to send a reverse ARP to resolve an IP address given a MAC address using nping for Windows. The documentation is not clear on how this should work and I'm unable to find any examples ...
7
votes
2answers
2k views

Nmap: find free IPs from the range

Is there a way to scan for free IPs on the network? I use nmap -sP 192.168.1.0/24 but this actually shows hosts that are up.
4
votes
7answers
4k views

Scan for connected, powered on computers on a network?

I want to scan for powered on computers on my LAN and gather logs about that. I tried nmap but it didn't work very well (a lot of switched on computers are not getting detected). nmap -sP 192.168.2....
7
votes
4answers
29k views

Can I use nmap to discover IPs and mac addresses?

When I need to locate the IPs of devices by their mac address on a Windows system, I normally use Advanced IP Scanner (from radmin.com) to scan the network, then I use arp -a to list the mac addresses....
45
votes
9answers
127k views

nmap find all alive hostnames and IPs in LAN

How can I issue a nmap command that shows me all the alive machines' IP addresses and corresponding hostname s in the LAN that I am connected? (if this can be done in another way/tool you surely are ...
0
votes
2answers
78 views

“Nmap Scripting Engine” HTTP Requests

I looked into my nginx access logs to check who accessed my server and I noticed this line: <IP> - - [25/Feb/2016:02:49:12 +0100] "GET / HTTP/1.1" 302 160 "-" "Mozilla/5.0 (compatible; Nmap ...
-1
votes
1answer
76 views

How to disable unwanted services in vyos?

I am using VYOS server. I used nmap to scan all the open ports. PORT STATE SERVICE 22/tcp open ssh 111/tcp filtered rpcbind 1521/tcp filtered oracle 1525/tcp filtered orasrv 14520/...
0
votes
3answers
1k views

nmap reports host up when it isn't

On an Ubuntu VMWare VM I ran: sudo nmap -sP 192.168.0.* This returned: Starting Nmap 5.00 ( http://nmap.org ) at 2010-12-28 22:46 PST Host 192.168.0.0 is up (0.00064s latency). Host 192.168.0.1 ...
0
votes
1answer
50 views

nmap silent with specific installation directory

Anyone have try to do the installation? it always install to c:\program files\WinPcap directory regardless of the parameter winpcap-nmap-4.02.exe /S /D="C:\tools\WinPcap\" http://seclists.org/nmap-...
2
votes
1answer
43 views

How to setup nmap ping count?

I need an arp-ping tool for windows Tried arp-ping http://www.elifulkerson.com/projects/arp-ping.php. Source address specification did not work in this tool. Then I came across nmap. -PR option suits ...
2
votes
0answers
54 views

Logstash nmap codec @timestamp match

I am using Logstash to input NMAP scan data into Elasticsearch. input{ http{ host => "127.0.0.1" port => 8000 codec => nmap } }...
3
votes
1answer
1k views

nmap and arp-scan inconsistent IP-MAC results

I seem to get variable and inconsistent results for the IP/MAC addresses from a particular machine, using nmap or arp-scan. The machine has 3 interfaces, and this is what it shows: $ uname -a Linux ...
0
votes
1answer
64 views

nmap shows strange open ports

Running nmap on my localhost shows me strange open ports: $ nmap -p- localhost Starting Nmap 6.47 ( http://nmap.org ) at 2015-12-28 12:14 CET Nmap scan report for localhost (127.0.0.1) Host is up (0....
6
votes
3answers
6k views

nmap does not find alive hosts with ping scan

I try to ping scan my local network using nmap, but it doesn't seem to find machines that are for sure alive. It responses to ping but on to ping scan. Results for ping: $ ping 192.168.0.2 PING 192....
0
votes
1answer
74 views

getting a list of live assets using nmap and script?

I'm playing around with a way to find all network assets from the command line that will return an IP, a hostname, and then have a way to see all interfaces associated with that host. I was using ...
1
vote
2answers
347 views

Port-scanning on Cisco router with Nmap

I have Cisco 2911 router just booted with factory settings and no ACLs or NAT configured. All I did is turned on the interfaces and assigned IPs. I am trying to scan for open ports with Nmap, but the ...
0
votes
1answer
46 views

Azure NAT blocking connections

When I try to connect to a port on the public IP address of a node, 50% of the time Azure doesn't respond and nmap marks it as "filtered". When I try to connect to the same port from the node using ...
-2
votes
1answer
55 views

cant scan and ping my ip from outside

when I scan my network using nmap it gives me something like this #nmap -vv -Pn -sV -sT -p80 -oG - 116.135.*.* # Ports scanned: TCP(1;80) UDP(0;) SCTP(0;) PROTOCOLS(0;) Host: 116.135.*.* () Status:...
0
votes
0answers
71 views

“Filtered” port when accessing server

I'm having periodic trouble accessing one of my DigitalOcean servers from Azure machines. I have isolated a test that - I believe - demonstrates the issue and captured a tcpdump from the server for ...
1
vote
2answers
86 views

Run ncat in background

from some time I'm trying to resolve very annoying issue: I need to have simple server which will listen on particular TCP port and throw all information which it recieve to trash. I'm doing it by ...
0
votes
1answer
21 views

NMAP not mapping DOWN status

I used this command from another post and the file scan.txt only shows the servers with UP status. The listing should also show down status of IP. Is there a switch for that? nmap -sn -PE -oG scan....
0
votes
1answer
83 views

Why nmap result is different from online port scanner result?

I have a vps A, and I am running smtp on it. If I run nmap from my local desktop to scan for my vps it turns out that port 25 (smtp) is filtered. However, if I run online scanner (fill my vps's IP ...
1
vote
1answer
304 views

NMAP (or other) continuous port scan until it returns open?

Is there a way with nmap or anything else to do a continuous port scan, say on port 22, until the service comes up and the port is coming back as open? Kind of like you may have an infinite ping ...
1
vote
2answers
242 views

Is there a reliable way to detect OS of the network hosts from linux workstation?

How to detect OS of running computers on the network. We use linux. I want to write wrapper on the python, which will periodically scan network and write results to google spreadsheet. I tried nmap -...
3
votes
1answer
805 views

Powershell and NMAP Information Sharing

I am working on a project where I would like to perform host documentation for a variety of items. Part of these items would be sourced from Powershell and the rest would be sourced from NMAP. For ...
0
votes
0answers
103 views

NMAP port scanning - inconsistent results

I ran the same nmap commands subsequently, and got two sets of results. I know that there are three open ports, but on each run, only two are shown. Can anyone explain these results? ramses@deimos:~...
-1
votes
2answers
67 views

I cant open a port iptables - The command runs, but port keeps closed [closed]

I want to make a simple redirect of my notebook port to a VM port (in my notebook also).. iptables -I INPUT -p tcp --dport 2424 -j ACCEPT iptables -t nat -A PREROUTING -p tcp --dport 2424 -j DNAT --...
1
vote
1answer
347 views

How to interpret nmap result, host up but no ports open

I have used nmap to map a network, scanning using the following command nmap -v -sS --no-stylesheet -T3 -sU -sV -O -oX <filename.xml> 192.168.69.0/24 Some of the hosts come back with a ...
0
votes
1answer
109 views

Inconsistent nmap scan results

I'm working on a program that depends on scanning the local network for all connected devices and getting their MAC address. To do this, I'm running the following command: nmap -sn 10.0.0.* This ...
2
votes
3answers
197 views

Why does nmap send two packets in order to test a single port

I run nmap with root privileges using sudo so I assume it has full access to creat raw sockets. Wireshark shows two packets used to test a single port when I used the command sudo nmap 192.168.110....
-1
votes
1answer
1k views

nmap unable to split netmask from target expression [closed]

I'm trying to scan my website with nmap to see what is visible from outside...but nmap returns this value... Starting Nmap 6.47 ( http://nmap.org ) at 2015-05-06 01:06 PDT Unable to split netmask ...
2
votes
1answer
75 views

How to test iptables settings by port scanning? [closed]

I want to test my iptables and prove that it only allows traffic for given Protocol / Port - combinations. How I can use as a target for a port scan?
4
votes
1answer
1k views

Completely getting rid of SSLv3 on Apache

Our security team is asking that we completely disable SSLv3 on some of our servers running Apache. I've used the SSLProtocol entry in the ssl.conf file (like SSLProtocol ALL -SSLv2 -SSLv3) and ...
19
votes
1answer
79k views

NMAP: Check if port 80 and 8080 is open

In our company, I want to check if users are running web servers on port 80 and 8080. I downloaded nmap and ran this command: nmap -p 80,8080 192.168.1.0-255 I got a list of IPs and tried to ...
3
votes
1answer
943 views

Nmap external scan shows port open, ASA says port is not open, but do get an socket

Folks, have a weird one, need your expert help. For one of our heavily used external facing server which came up in an audit, nmap -Pn scan shows the following: Starting Nmap 5.51 ... Host ...
0
votes
1answer
145 views

Why is port 443 (but not port 80) being exposed to nmap when iptables is configured to drop the traffic?

A Debian box is running web services on ports 80 and 443 and iptables is configured to allow web traffic only from white listed ip addresses. A second Debian box (that is not white listed) is using ...
0
votes
1answer
585 views

ACL Rule to Open UDP Ports

I have the current rules in an attempt to open port 5060 and 10000-20000 for my VoIP provider. We are on a Cisco 1921 router. This ACL is applied to the WAN port on the router facing the ISP. Nmap ...
1
vote
5answers
18k views

How to find out that SMTP server is in open relay?

I used nmap for network security testing. It found that SMTP server was in open relay. Here is the output: nmap --script smtp-open-relay testwww.confidesk.com PORT STATE SERVICE 25/tcp open ...
0
votes
0answers
251 views

Unknown device showing up in network scan

I need some help finding a device that has been showing up whenever I scan my network using Spiceworks' "Inventory" scan. I can ping the device, but nslookup returns a non-existent domain, and ...
1
vote
0answers
74 views

One device shows down when more than 160 ip addresses are scanned with nmap

This is bugging me. I consistently have a single device that fails to respond to an nmap scan when more than ~160 IP addresses are specified. I seem to get mixed results between 150-160 IP addresses ...
0
votes
2answers
422 views

How do I test my firewall rules?

I've setup some rules in ufw and I've turned it on. Now I want to ensure my rules actually block traffic. However, when running nmap -PN -p <my_port> <ip> from my local workstation it ...
0
votes
0answers
39 views

outlook doing remote portscanning

A while ago I switched my mailbox on another domain and configured outlook with an exchange server on that domain. Recently for some strange reason my hosting provider has been complaining that ...
5
votes
4answers
7k views

Is there a way to see what is actually filtering TCP port communication?

nmap -p 7000-7020 10.1.1.1 Will output all the filtered ports Starting Nmap 6.40 ( http://nmap.org ) at 2015-03-04 12:18 EET Nmap scan report for 10.1.1.1 Host is up (0.00091s latency). PORT ...
0
votes
2answers
646 views

Generate List of IP's With User Names On Windows Network

We recently setup GFI WebMonitor on our network which is giving me back IP's instead of User's. I'm in the process of determining whether we will be able to implement authentication on the proxy to ...
2
votes
2answers
428 views

nmap results to find open ports for SIP

I suspect that a firewall, or other security, on either the router, or on tleilax or doge is causing a problem with SIP calls. How do I establish that the connection is allowed and not being blocked? ...