RE: nmap -sP -PE -R -v behaves differently with root/un-root

["Lehman, Jim" <jim.lehman () interactivedata com>]

When non root user

Warning:  You are not root -- using TCP pingscan rather than ICMP

If ICMP is blocked ......



-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of Martin T
Sent: Sunday, August 07, 2011 2:16 PM
To: John Hunter
Cc: security-basics () securityfocus com
Subject: Re: nmap -sP -PE -R -v behaves differently with root/un-root

John,
I would use "--packet-trace" or tcpdump in order to get a better understanding which probes nmap does. In addition, 
please pay attention that most of the domain names you specified resolved to multiple IP addresses.


regards,
martin

2011/8/5 John Hunter <johnny.h.hunter () gmail com>:
> I was running the command
>
> nmap -sP -PE -R -v microsoft.com ebay.com yahoo.com \
> > google.com slashdot.org
>
> it behaves differently when I was a root user and a non-root user.
> ironically that when I was a non-root, the result is more accurate.
>
> when I was a non-root:
>
> john@virtual-evolution:~$ nmap -sP -PE -R -v microsoft.com ebay.com
> yahoo.com \
> > google.com slashdot.org
>
> ....
> Host 207.46.232.182 is up (0.014s latency).
> Host pages.ebay.com (66.211.160.87) is up (0.086s latency).
> Host ir1.fp.vip.ac4.yahoo.com (67.195.160.76) is up (0.016s latency).
> Host vw-in-f147.1e100.net (74.125.113.147) is up (0.028s latency).
> Host slashdot.org (216.34.181.45) is up (0.038s latency).
> Nmap done: 5 IP addresses (5 hosts up) scanned in 13.36 seconds
>
>
> when i was a root:
>
> root@virtual-evolution:~# nmap -sP -PE -R -v microsoft.com ebay.com
> yahoo.com google.com slashdot.org
>
> ....
>
> Host 207.46.197.32 is down.
> Host pages.ebay.com (66.135.205.14) is down.
> Host ir1.fp.vip.mud.yahoo.com (209.191.122.70) is down.
> Host vw-in-f106.1e100.net (74.125.113.106) is down.
> Host slashdot.org (216.34.181.45) is up (0.044s latency).
> Nmap done: 5 IP addresses (1 host up) scanned in 14.26 seconds
>            Raw packets sent: 10 (280B) | Rcvd: 6 (168B)
>
>
> Why is that?
>
> Thanks!
>
> ----------------------------------------------------------------------
> -- Securing Apache Web Server with thawte Digital Certificate In this
> guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it 
> benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
> install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
> highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be4
> 42f727d1
> ----------------------------------------------------------------------
> --

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and 
who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell 
if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your 
Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing 
management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


DISCLAIMER: This message (including any files transmitted with it) may contain confidential and / or proprietary 
information, is the property of Interactive Data Corporation and / or its subsidiaries and is directed only to the 
addressee(s). If you are not the designated recipient or have reason to believe you received this message in error, 
please delete this message from your system and notify the sender immediately. An unintended recipient's disclosure, 
copying, distribution or use of this message, or any attachments, is prohibited and may be unlawful.

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------