mailing list archives
NMAP and HP JetDirect port
From: "Uri Gilad" <ugilad () forescout com>
Date: Tue, 14 Jun 2005 08:53:52 +0300
this issue has been raised before, but to recap :
running nmap -sO or nmap -sV on a host, not specifying a specific port will send data to port 9100/TCP .
HP printers use this port for the JetDirect protocol, meaning the printer will happily print whatever
strings the nmap throws at it in attempt to detect the protocol used on this port. This will consume large
amounts of paper, and is an unwanted side effect in almost every scenario.
It seems that commenting out 9100/TCP in nmap-services will alleviate this problem.
Two questions arise:
1. Is this the best method to cause nmap to skip 9100/TCP in scanning a host.
2. Have anyone experianced any similar problems with printers (we only have one
brand of printers...)
Sent through the nmap-dev mailing list
- NMAP and HP JetDirect port Uri Gilad (Jun 14)