Nmap Development Mailing List

Unmoderated technical development forum for debating ideas, patches, and suggestions regarding proposed changes to Nmap and related projects. Subscribe to nmap-dev here.

List Archives

Latest Posts

Missing ssh hostkeys when running at scale Loone, Sami (May 04)
Hello nmap devs,

I'm writing in hope that a oneliner pull request could get a bit of attention.

https://github.com/nmap/nmap/pull/2338

In short, ssh hostkey scan script intermittently ends up missing some of the
expected keys when running at scale. The patch is to fix nmap ssh packet
encoding for multiprecision integers.

I've recently added a hacky shell script to the pull request to make it a bit
easier to reproduce the issue...

Re: Writing high-performance npcap application Daniel Miller (Apr 29)
Jan,

Thanks for your interest in Npcap! I'll try to answer questions inline
below.

On Wed, Apr 27, 2022 at 1:21 PM Jan Danielsson <jan.m.danielsson () gmail com>
wrote:

Questions can also be posted as Issues on our Github page, but the nmap-dev
mailing list is also publicly archived, so it works well for this type of
discussion.

I believe most of the performance difference there would be because Npcap
so far does not support a...

Writing high-performance npcap application Jan Danielsson (Apr 27)
Hello,

[The npcap page said it was ok to use nmap mailing list for npcap
related questions. If there's a more appropriate forum, please point me
to it.]

I'm working on an application that requires very high transfer rates
of raw ethernet packets. As a reference, we use libpcap on unixy
platforms and are able to saturate a 1Gbit/s link, with zero packet
loss. A few customers need Windows support, so we're looking...

Zenmap Scan Compare Error Ken Waldrop via dev (Apr 26)
Hello,

I experience the following error when trying to compare saved scans. I tried to copy/paste the text, but I had no
success pasting it after copying. I am running MacOS 12.3.1 and XQuartz 2.8.1.

Ken Waldrop
waldrop01 () icloud com

RE: bug with NSE script john robison (Apr 26)
Hello,

This is the criteria.

nmap -sS -sU -T4 -A -v -PE -PP -PS21,22,23,25,80,113,31339 -PA80,113,443,10042 -PO --script all 192.168.1.0/24

Here is an example.

NSE Timing: About 99.25% done; ETC: 18:25 (0:00:41 remaining)

NSE: [backorifice-brute] Skipping 'backorifice-brute' portrule, 'ports' argument is missing.

NSE: [backorifice-brute] Skipping 'backorifice-brute' portrule, 'ports' argument is...

bug with NSE script john robison (Apr 26)
NSE: [backorifice-brute] Skipping 'backorifice-brute' portrule, 'ports' argument is missing.

The keeps repeating is disconnects the NSE script multiple times. Waiting 10 minutes for N+.01 second from N=99.00 is
worse than paint drying. LOL.

Best regards,

John

Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for Windows

Removing scan options in the UI does not remove them in the address line Eitan Caspi (Feb 24)
Hello,

I use zenmap 7.92 on window 10, latest build, 21H2.

When editing an existing profile and at the command line there is a use of
-sT and -sU and -T4 - when changing these options from the UI drop-down
lists to "None" - they are not removed from the profile's command line at
the top.

Changing to other values, that are not "none", from within each option type
- works fine and updates the command line with the...

can not set option and profile Bernard (Feb 24)
Greetings Kind Regards Thank You for providing Zenmap 7.92 for Windows
10 . The attached GIF demonstrates setting the -6 option causes the
selected profile to be cleared then selecting the profile causes the
-6 option to disappear ad infinitum . I may be doing something wrong
as I know nothing re/ networks so I beg your indulgence . I merely
copied the address from All Settings . Network & Internet . Status .
View hardware and connection...

packet-trace inconsistent paacman via dev (Feb 23)
I've noticed when using the packet-trace option that Nmap doesn't always display all packets sent and received.

For example doing a syn scan all the packets (SYN, ACK, Reset) are shown but doing a connect scan does not. Is this by
design for some reason?_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/

Re: Most popular ports updated last Robin Wood (Feb 19)
I'd have thought that most boxes that have 443 open also have 80 but there
will still be some older boxes that have just 80.

Robin

Re: Most popular ports updated last Esa Jokinen via dev (Feb 19)
The port frequency information seems to be rather old; from Sep 5, 2008
commit 415bcdf1a64472a85b90158cf5cde8594443ef68 [1], and the open-
frequency column still has the same values for HTTP(S):

http 80/tcp 0.484143 # World Wide Web HTTP
http 80/udp 0.035767 # World Wide Web HTTP
https 443/tcp 0.208669 # secure http (SSL)
https 443/udp 0.010840

More recent statistics gathered from...

Most popular ports updated last paacman via dev (Feb 17)
When was the last time the most popular ports been updated in the nmap-services file? I'm wondering about the usage
frequency, it shows http is the most opened port, I would think https is now the most open port._______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/

Re: Nmap 25th anniversary Arturo 'Buanzo' Busleiman (Feb 16)
I am SO +1 on this. Where?

Nmap 25th anniversary Sebastian Garcia (Feb 15)
Hi awesome community!

Hey, this Sep 1st, 2022 is going to be the 25th anniversary of our beloved
Nmap. I believe it is a good moment to do something and celebrate. A
quarter century is not something many tools live to see, with such a
continuous energy, effort and impact in our community.

What about doing something? A conference? flyers on the street? the largest
nmap hackers online call of the century? Organising a 'Scan your network
and...

[NSE] Problems with authentication in ms-sql in Nmap 7.91+ Paulino Calderon (Jan 14)
Hey,

I was wondering if anyone familiar with the MS-SQL protocol knows what
might be happening here. The dev branch version crashes at the moment
when scanning Microsoft SQL Server 2005 9.00.3042; SP2:

NSE: [ms-sql-brute M:b41d0c xx.xx.xx.xx] MSSQL-SSRP: SSRP Data:
ServerName;XXXX;InstanceName;MSSQLSERVER;IsClustered;No;Version;9.00.3042.00;tcp;1433;;
NSE: [ms-sql-brute M:b41d0c xx.xx.xx.xx] MSSQL-SSRP: SSRP Substrings:...

More Lists

Dozens of other network security lists are archived at SecLists.Org.