OK I couldn't resist sending the TCP connect scan just to show that it actually does work under Windows XP SP2. The scan did complete but it took only an hour and a half to complete on a 100Mb full duplex network.
C:\nmap\nmap-3.55-SP2>nmap tirpitz -sT -v
Starting nmap 3.55-SP2 ( http://www.insecure.org/nmap ) at 2004-08-13 08:08 Paci
fic Daylight Time
Host tirpitz.corp.warnocksolutions.com (192.168.200.201) appears to be up ... go
od.
Initiating Connect() Scan against tirpitz.corp.warnocksolutions.com (192.168.200
.201) at 08:08
Adding open port 464/tcp
Adding open port 1067/tcp
Adding open port 593/tcp
Adding open port 1025/tcp
Adding open port 1112/tcp
Adding open port 3268/tcp
Adding open port 1026/tcp
Adding open port 8081/tcp
Adding open port 25/tcp
Adding open port 636/tcp
Adding open port 88/tcp
Adding open port 1433/tcp
Adding open port 6001/tcp
Adding open port 42/tcp
Adding open port 53/tcp
Adding open port 6004/tcp
Adding open port 80/tcp
Adding open port 3389/tcp
Adding open port 6002/tcp
Adding open port 3269/tcp
Adding open port 691/tcp
Adding open port 135/tcp
Adding open port 444/tcp
Adding open port 139/tcp
Adding open port 445/tcp
Adding open port 443/tcp
Adding open port 389/tcp
The Connect() Scan took 430 seconds to scan 1660 ports.
Interesting ports on tirpitz.corp.warnocksolutions.com (192.168.200.201):
(The 1633 ports scanned but not shown below are in state: filtered)
PORT STATE SERVICE
25/tcp open smtp
42/tcp open nameserver
53/tcp open domain
80/tcp open http
88/tcp open kerberos-sec
135/tcp open msrpc
139/tcp open netbios-ssn
389/tcp open ldap
443/tcp open https
444/tcp open snpp
445/tcp open microsoft-ds
464/tcp open kpasswd5
593/tcp open http-rpc-epmap
636/tcp open ldapssl
691/tcp open resvc
1025/tcp open NFS-or-IIS
1026/tcp open LSA-or-nterm
1067/tcp open instl_boots
1112/tcp open msql
1433/tcp open ms-sql-s
3268/tcp open globalcatLDAP
3269/tcp open globalcatLDAPssl
3389/tcp open ms-term-serv
6001/tcp open X11:1
6002/tcp open X11:2
6004/tcp open X11:4
8081/tcp open blackice-icecap
Nmap run completed -- 1 IP address (1 host up) scanned in 5671.047 seconds
Received on Aug 13 2004
Intro
