Re: Follow up to NMAP on Snow Leopard with VMWARE Fusion installed

[David Fifield <david () bamsoftware com>]

On Mon, Sep 21, 2009 at 07:28:50AM -0400, Walt Scrivens wrote:
> Here's some more info - this time with 5.00.  I did the same scan  
> through Zenmap, running natively under Snow Leopard, and running as a  
> Windows 7 VM under VMWare Fusion under Snow Leopard.  Same computer,  
> same network.
> I used the "canned" Intense Scan profile in Zenmap from the Windows vm, 
> and copy/pasted it into the Mac Zenmap since its version of Intense Scan 
> did not include the -PE -PS22,25,80 -PA21,23,80,3389
>
> It looks to me as if the Mac user scan worked correctly, being the same 
> as the Windows scan less that which requires root to run.  The Mac root 
> scan fails miserably.
>
> Now the Mac version:
> ======================================
> nmap -T4 -A -v -PE -PS22,25,80 -PA21,23,80,3389 192.168.1.1
>
> Starting Nmap 5.00 ( http://nmap.org ) at 2009-09-21 07:10 EDT
> NSE: Loaded 30 scripts for scanning.
> Initiating ARP Ping Scan at 07:10
> Scanning 192.168.1.1 [1 port]
> Completed ARP Ping Scan at 07:10, 0.21s elapsed (1 total hosts)
> Read data files from: /usr/local/share/nmap
> Note: Host seems down. If it is really up, but blocking our ping probes, 
> try -PN
> Nmap done: 1 IP address (0 hosts up) scanned in 0.47 seconds
>            Raw packets sent: 2 (84B) | Rcvd: 0 (0B)
>
> =======================================

This is a known problem that has already been fixed in Subversion. Can
you reproduce it with a recent checkout? The problem exists in the 5.00
release.

David Fifield

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org