Re: Different scan results depending on whether root or unprivileged

["Hans Nilsson" <hasse_gg () ftml net>]

If you only want to find out which hosts are active maybe you should try
with a ping scan? What happens if you do:

sudo nmap -sP xxx.xxx.xxx.0/24
or, more like your example:
sudo nmap --send-ip -sP -T4 -PS:22,23,80,135,513,514 -PU:161
xxx.xxx.xxx.0/24


On Wed, 10 Jan 2007 15:31:05 +0000, "Tim Edwards"
<tkedwards () fastmail com au> said:
> Hi,
>
> I'm trying to work out the root cause of a problem we're having where
> nmap reports all possible IPs in a network as having active hosts when
> run as root:
> sudo /usr/bin/nmap -sT -T4 -p T:22,23,80,135,513,514,U:161
> xxx.xxx.xxx.0/24
> (reports all 256 possible IPs as having active hosts)
>
> nmap -sT -T4 -p T:22,23,80,135,513,514,U:161 xxx.xxx.xxx.0/24
> (correctly reports only what's there)
>
> Does anyone know why these results would be different?
>
> Thanks
>
> Tim Edwards
>
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://SecLists.Org
-- 
  Hans Nilsson
  hasse_gg () ftml net

-- 
http://www.fastmail.fm - Does exactly what it says on the tin


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org