Re: Nmap & Whonix Issue

[David Fifield <david () bamsoftware com>]

On Wed, Oct 17, 2012 at 08:36:43AM -0500, Distorchion Zero wrote:
> This is the output I always get. Again, it doesn't matter which host I use.
> I did a pastebin 'cause it is kinda long:
>
> http://pastebin.com/AEJhPp2Y
> Starting Nmap 6.01 ( http://nmap.org ) at 2012-10-17 13:21 UTC
> Nmap scan report for 1.1.1.1
> Host is up (0.00062s latency).
> PORT      STATE SERVICE
> 1/tcp     open  tcpmux
> 3/tcp     open  compressnet
> 4/tcp     open  unknown
> 6/tcp     open  unknown
> 7/tcp     open  echo
> 9/tcp     open  discard
> 13/tcp    open  daytime

Try doing a scan with -sT, and also try a scan with --unprivileged.

nmap -d -sT 1.1.1.1
nmap -d --unprivileged 1.1.1.1

You should always run with at least -d when you're trying to debug a
problem.

I'm sure not all these ports are open. Your guess that it is a local
transparent proxy or something similar is probably correct. With a
round-trip time of 0.00062 s, there's no way you're hitting the
Internet.

For a similar report, see

http://seclists.org/nmap-dev/2012/q4/64
http://seclists.org/nmap-dev/2012/q4/77

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/