Printable View
All of the websites I've scanned with Nmap-3.55 tell me that the "host seems down", and if it is blocking ping probes to try "-P0"instead. If I was scanning for example:
c:\Program Files\nmap-3.55>[glowpurple]nmap -A -T4 xxxxxx.com[/glowpurple]
and it came up with that, what would I replace with the -P0, the -A or the -T4?
Also, do you know of any sites which support being scanned for newbies, cause I scanned scanme.insecure.org and it also said the "host seems down".
J_K9
The way you put that it sounds like you are picking websites at random..... While most admins will ignore you some are a little jittery and may report you to your ISP who may decide you are in breach of their AUP and cut your access..... 'nuff said?Quote:
All of the websites I've scanned with Nmap-3.55 tell me that the "host seems down",
Just add the -P0 to the command line. It's a simple "do or don't" switch that IIRC isn't reliant on any other switch. NMap will ping by default so unless you specify "don't" then it will assume that the host itself is down if the ping is blocked by a firewall and stop operation.
Further "warning".... NMap pings, along with a lot of the types of scans it uses are becoming more "noticable" by IDS' which makes it harder to use from a single location or on an idle host scan for example than it used to be.....
You will be noticed by competent admins.....
Search this forum , section security tutorials, for some really good tutorials on nmap scanning by thehorse13.
They should tell you practically all there is about nmap.
Cheers,
http://www.antionline.com/search.php...der=descending
I've downloaded nmap-3.50 instead because I read threads on it restarting the subject computer, but when I do the same command and include -P0 the result doesn't come back. It just hangs... This is scanning "scanme.insecure.org".
You need to have a little patience with NMap.... It doesn't just pop up immediately and say "Hah, WinXP, build x.xxx.xx with these ports open". It takes it's time unless you set the timing to insane..... even then it isn't like a racehorse.... It can still take several minutes.
Oh, thanks, I've managed to get it working on the command "nmap -v -P0 scanme.insecure.org".
Thanks for all your help!! :D
Ok, it's not where I thought it was going! :o Now it really is hanging after "ïnitiating SYN Stealth Scan". I'll wait for another 10 mins and see how it goes...
J_K9
NMap isn't "chatty" even in very verbose mode..... patience my boy, patience... ;)
For those who are wondering what this -A business is, it is merely version scan using the new switch. It is the same as using -sV -O but instead, -A wraps both commands into one switch.
Also, NMAP running on an XP SP2 machine will do shitty things now that raw socket support is gone. There are two switches that can be used to possibly get it working. One is -P0 and the other is to tell it not to use raw sockets (haven't used that switch in a dog's age. it's something like -no win_raw_sock).
One more thing, running NMAP from behind a SOHO NAT router such as a linksys BEFSR41 generally produces baaaad results. Try something on your local LAN segment first just to see if your NMAP command is producing what you expect to see.
Anyway, FWIW.
--TheHorse13
EDIT: btw, setting the timing to 4 is like running a bull through a china shop. Even a n00b admin will see an agressive NMAP scan.
Thanks TH13 for the info, but I am not connected to any network. Just dialup connection. Also, what is the quickest way to find out the IP address of your own computer?
Oh, BTW, nmap is STILL initiating SYN Stealth Scan on scanme.insecure.org
drop to a command prompt and type IPCONFIG
Just as an aside..... Dial-up connects you to a network.... When you dial you are dialling a network....
I never tried it but I have to believe that NMap over dial-up will be _painfully_ slow.... Though logically that might not be as sensible statement as it might appear.....
What really kills the speed of NMAP scans is when devices such as firewalls reside in the path. Ever seen what a Cisco PIX does to the efficiency of an NMAP scan? Heh. You may as well go on vacation and come back to get your results.
Thanks TH13 and Tiger Shark, you two have really helped. After 25 mins the scan on "very verbose" (don't know about timing TH!!) finished and gave me the results. Is that what you meant about timing? Is 25 mins long enough for you Tiger Shark :D ?!? Thanks TH for the IPCONFIG info. Really helpful. Appreciate both of you.
Yours sincerely ;) ,
J_K9
25 minutes.... over dial up is probably not unreasonable.....
25 minutes??... doesn't make sense to..me..hmm I used dialup connection at my aunties house..and took me less then 2 minutes to scanned my work place.Quote:
Originally posted here by J_K9
Thanks TH13 and Tiger Shark, you two have really helped. After 25 mins the scan on "very verbose" (don't know about timing TH!!) finished and gave me the results. Is that what you meant about timing? Is 25 mins long enough for you Tiger Shark :D ?!? Thanks TH for the IPCONFIG info. Really helpful. Appreciate both of you.
Yours sincerely ;) ,
J_K9
Btw I used nmap on my OpenBSD lappy..and I never tried on windows, but I don't thing that..making any differences (I don't know about XP SP2..well I could be wrong).
Read Nmap tutorial from thehorse13, you will find it here..the best tut nmap I've never read in any websites...
That's because I write all of my own stuff. I would never ever steal other people's work.Quote:
..the best tut nmap I've never read in any websites...
:)