Nmap Development mailing list archives

multiple nmap processes on same ip


From: Simon <simon.xhz () gmail com>
Date: Wed, 10 May 2006 21:59:47 -0600

Hi,
  I'm using nmap in the ISP I work for.  I've just started using it
now and it does clarify some situations, I truly understand why the
name "network map", I can now clearly see the obscure side of windows
boxes! ;)

  I'm just wondering about something.  We have little time to do our
work and the test will have to be very precise and very fast.  One way
of doing this for now will be to invoke many instances of nmap to use
different scanning options.  For example, I'm thinking on doing one
that will thoroughly test all Host Discovery tests available (or the
ones that show useful results on our network and our customers),
another one for testing TCP, and so on.
  The idea behind this is host discovery seems to be faster than tcp
portscan (on a firewalled host, every probes have to timeout, takes a
long time).  So, it would give quick information as quickly as
possible, and will give as much as possible, even if it takes 5
minutes per host.

  There will be a php interface that will sort out and display the
nmap information as it arrives (using server_push rather than
auto-refresh).

  So my question is this, is there an impact on running different nmap
scans on the same ip address with different (or sometimes possibly
repeated) options?

  Also, I will probably be scanning myself a number of around 10 PCs
or more a day.  Just me, while I develop this tool.  Maybe I can tell
you what I find on the internet and contribute to nmap's fingerprint
database and os detection, etc...  I've asked my bosses if they agreed
to this kind of cooperation as it can disclose information about our
network.  I think they will agree, if not, I'll work on it!  ;)

Thanks a lot in advance,
  Simon


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev


Current thread: