FW: problem with my IP phone when i run scan

[<sampath.kumar1 () wipro com>]

Hi Fyodor,

Thanks for the reply. I am sending the traces again in zip format as per
your mail.



Best Regards,

Sampath

________________________________

From: Sampath Kumar (WT01 - TES-Enterprise Networks)
Sent: Tuesday, June 03, 2008 6:29 PM
To: 'nmap-dev () insecure org'
Subject: problem with my IP phone when i run scan



Hi,



When I run Intense Scan, Quick Full version Detection Scan or Quick
Services version detection i am getting problem with my IP phone. The
problem scenario is I started the scan on my IP phone. once it is done
if try to initiate a call from my IP phone, the call will not be
started.

i am attaching an ethereal trace while running intense scan on IP phone.
and after that the initiation of the call. ( Intensescan.pcap file
contains the traces while running NMAP and initiating a call from my
IPphone)





NMAP is running in 130.100.188.253

Phone Ip address is : 130.100.188.174

exchange IP address where the phone is registered. 130.100.205.133



If we try to filter the signals with ip.addr==130.100.188.174, we can
see the admission request and admission confirmation for the call but,
after that the phone is trying to contact 130.100.188.253 where my NMAP
was running. Is there any speciality about 1390 port ( why I am asking
this is, its always using using the 1390 port to contact the server when
i try to make a call after NMAP). I am not sure why it is happenning,
can you please help me that whether this is a problem with my IP phone
or the NMAP. I have to reboot the phone if I want to make my phone work.


See the signal number 6066.





I am also attaching the network traces when the phone is working.
(before running the NMAP).





OS: windows 2000

nmap: zenmap4.62





Best Regards,

Sampath




Please do not print this email unless it is absolutely necessary. 

The information contained in this electronic message and any attachments to this message are intended for the exclusive 
use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the 
intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately 
and destroy all copies of this message and any attachments. 

WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for 
the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. 

www.wipro.com

Attachment: traces.zip
Description: traces.zip

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org