Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos

Nmap Development: Re: Different scan results depending on whether root or unprivileged

Re: Different scan results depending on whether root or unprivileged

From: Hans Nilsson <hasse_gg_at_ftml.net>
Date: Wed, 10 Jan 2007 23:40:39 -1100

If you only want to find out which hosts are active maybe you should try
with a ping scan? What happens if you do:

sudo nmap -sP xxx.xxx.xxx.0/24
or, more like your example:
sudo nmap --send-ip -sP -T4 -PS:22,23,80,135,513,514 -PU:161
xxx.xxx.xxx.0/24

On Wed, 10 Jan 2007 15:31:05 +0000, "Tim Edwards"
<tkedwards_at_fastmail.com.au> said:
> Hi,
>
> I'm trying to work out the root cause of a problem we're having where
> nmap reports all possible IPs in a network as having active hosts when
> run as root:
> sudo /usr/bin/nmap -sT -T4 -p T:22,23,80,135,513,514,U:161
> xxx.xxx.xxx.0/24
> (reports all 256 possible IPs as having active hosts)
>
> nmap -sT -T4 -p T:22,23,80,135,513,514,U:161 xxx.xxx.xxx.0/24
> (correctly reports only what's there)
>
> Does anyone know why these results would be different?
>
> Thanks
>
> Tim Edwards
>
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://SecLists.Org

-- 
  Hans Nilsson
  hasse_gg_at_ftml.net
-- 
http://www.fastmail.fm - Does exactly what it says on the tin
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org
Received on Jan 11 2007
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]