NMAP and HP JetDirect port

["Uri Gilad" <ugilad () forescout com>]

Hi, 
        this issue has been raised before, but to recap : 
running nmap -sO or nmap -sV on a host, not specifying a specific port will send data to port 9100/TCP . 
HP printers use this port for the JetDirect protocol, meaning the printer will happily print whatever
strings the nmap throws at it in attempt to detect the protocol used on this port. This will consume large
amounts of paper, and is an unwanted side effect in almost every scenario. 

It seems that commenting out 9100/TCP in nmap-services will alleviate this problem. 

Two questions arise: 

1. Is this the best method to cause nmap to skip 9100/TCP in scanning a host. 
2. Have anyone experianced any similar problems with printers (we only have one 
brand of printers...) 

Thanks, 

Uri Gilad. 


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev