RE: [BULK] Re: new Win install fails beyond localhost

["Norris Carden" <ncarden () ascendfcu org>]

BTW, the same install package is working fine on my XP desktop.


***WinIP***  trying to initialize WinPcap

Winpcap present, dynamic linked to: WinPcap version 4.1.1 (packet.dll
version 4.1.0.1753), based on libpcap version 1.0 branch 1_0_rel0b
(20091008)

NPF service is already running.



Starting Nmap 5.21 ( http://nmap.org ) at 2010-03-09 15:37 Central
Standard Time

The max # of sockets we are using is: 0

--------------- Timing report ---------------

  hostgroups: min 1, max 100000

  rtt-timeouts: init 1000, min 100, max 10000

  max-scan-delay: TCP 1000, UDP 1000, SCTP 1000

  parallelism: min 0, max 0

  max-retries: 10, host-timeout: 0

  min-rate: 0, max-rate: 0

---------------------------------------------

Initiating Ping Scan at 15:37

Scanning scanme.nmap.org (64.13.134.52) [5 ports]

Pcap filter: dst host 10.1.1.XX and (icmp or ((tcp or udp or sctp) and
(src host 64.13.134.52)))

Packet capture filter (device eth0): dst host 10.1.1.XX and (icmp or
((tcp or udp or sctp) and (src host 64.13.134.52)))

SENT (2.5010s) ICMP 10.1.1.XX > 64.13.134.52 echo request
(type=8/code=0) ttl=49 id=48165 iplen=28 

**TIMING STATS** (2.5010s): IP, probes
active/freshportsleft/retry_stack/outstanding/retranwait/onbench,
cwnd/ssthresh/delay, timeout/srtt/rttvar/

   Groupstats (1/1 incomplete): 1/*/*/*/*/* 10.00/75/* 1000000/-1/-1

Current sending rates: 7.09 packets / s, 198.58 bytes / s.

Overall sending rates: 7.09 packets / s, 198.58 bytes / s.

SENT (2.5160s) TCP 10.1.1.XX:44959 > 64.13.134.52:21 A ttl=39 id=34950
iplen=40  seq=0 win=4096 ack=137136808 

SENT (2.5160s) TCP 10.1.1.XX:44959 > 64.13.134.52:23 A ttl=57 id=4494
iplen=40  seq=0 win=2048 ack=137136808 

SENT (2.5160s) TCP 10.1.1.XX:44959 > 64.13.134.52:80 A ttl=52 id=35792
iplen=40  seq=0 win=1024 ack=137136808 

SENT (2.5160s) TCP 10.1.1.XX:44959 > 64.13.134.52:3389 A ttl=57 id=54005
iplen=40  seq=0 win=2048 ack=137136808 

**TIMING STATS** (2.5160s): IP, probes
active/freshportsleft/retry_stack/outstanding/retranwait/onbench,
cwnd/ssthresh/delay, timeout/srtt/rttvar/

   Groupstats (1/1 incomplete): 5/*/*/*/*/* 10.00/75/* 1000000/-1/-1

Current sending rates: 32.05 packets / s, 1205.13 bytes / s.

Overall sending rates: 32.05 packets / s, 1205.13 bytes / s.

**TIMING STATS** (3.5160s): IP, probes
active/freshportsleft/retry_stack/outstanding/retranwait/onbench,
cwnd/ssthresh/delay, timeout/srtt/rttvar/

   Groupstats (1/1 incomplete): 4/*/*/*/*/* 10.00/75/* 1000000/-1/-1

Current sending rates: 4.33 packets / s, 162.63 bytes / s.

Overall sending rates: 4.33 packets / s, 162.63 bytes / s.

SENT (4.5320s) TCP 10.1.1.XX:44960 > 64.13.134.52:3389 A ttl=38 id=41790
iplen=40  seq=0 win=3072 ack=137202345 

SENT (4.5320s) TCP 10.1.1.XX:44960 > 64.13.134.52:80 A ttl=58 id=27310
iplen=40  seq=0 win=3072 ack=137202345 

SENT (4.5320s) TCP 10.1.1.XX:44960 > 64.13.134.52:23 A ttl=53 id=63427
iplen=40  seq=0 win=2048 ack=137202345 

SENT (4.5320s) TCP 10.1.1.XX:44960 > 64.13.134.52:21 A ttl=44 id=28251
iplen=40  seq=0 win=1024 ack=137202345 

SENT (4.5320s) ICMP 10.1.1.XX > 64.13.134.52 echo request
(type=8/code=0) ttl=56 id=27790 iplen=28 

**TIMING STATS** (4.5320s): IP, probes
active/freshportsleft/retry_stack/outstanding/retranwait/onbench,
cwnd/ssthresh/delay, timeout/srtt/rttvar/

   Groupstats (1/1 incomplete): 5/*/*/*/*/* 10.00/75/* 1000000/-1/-1

Current sending rates: 4.60 packets / s, 173.11 bytes / s.

Overall sending rates: 4.60 packets / s, 173.11 bytes / s.

**TIMING STATS** (5.5480s): IP, probes
active/freshportsleft/retry_stack/outstanding/retranwait/onbench,
cwnd/ssthresh/delay, timeout/srtt/rttvar/

   Groupstats (1/1 incomplete): 0/*/*/*/*/* 10.00/75/* 1000000/-1/-1

Current sending rates: 3.14 packets / s, 117.94 bytes / s.

Overall sending rates: 3.14 packets / s, 117.94 bytes / s.

ultrascan_host_probe_update called for machine 64.13.134.52 state
UNKNOWN -> HOST_DOWN (trynum 1 time: 1031000)

ultrascan_host_probe_update called for machine 64.13.134.52 state
HOST_DOWN -> HOST_DOWN (trynum 1 time: 1031000)

ultrascan_host_probe_update called for machine 64.13.134.52 state
HOST_DOWN -> HOST_DOWN (trynum 1 time: 1031000)

ultrascan_host_probe_update called for machine 64.13.134.52 state
HOST_DOWN -> HOST_DOWN (trynum 1 time: 1031000)

ultrascan_host_probe_update called for machine 64.13.134.52 state
HOST_DOWN -> HOST_DOWN (trynum 1 time: 1031000)

Moving 64.13.134.52 to completed hosts list with 5 outstanding probes.

Completed Ping Scan at 15:37, 3.20s elapsed (1 total hosts)

Overall sending rates: 3.12 packets / s, 117.39 bytes / s.

pcap stats: 307 packets received by filter, 0 dropped by kernel.

mass_rdns: Using DNS server 10.1.1.XX

mass_rdns: Using DNS server 10.1.1.YY

mass_rdns: Using DNS server 10.1.1.XX

mass_rdns: Using DNS server 10.1.1.YY

Nmap scan report for scanme.nmap.org (64.13.134.52) [host down, received
no-response]

Failed to resolve given hostname/IP: nmap.  Note that you can't use
'/mask' AND '1-4,7,100-' style IP ranges

No data files read.

Note: Host seems down. If it is really up, but blocking our ping probes,
try -PN

Nmap done: 1 IP address (0 hosts up) scanned in 5.56 seconds

           Raw packets sent: 10 (376B) | Rcvd: 0 (0B)


-----Original Message-----
From: David Fifield [mailto:david () bamsoftware com] 
Sent: Tuesday, March 09, 2010 3:36 PM
To: Norris Carden
Cc: nmap-dev () insecure org
Subject: [BULK] Re: new Win install fails beyond localhost
Importance: Low

On Tue, Mar 09, 2010 at 03:30:30PM -0600, Norris Carden wrote:
> Results as requested... thanks for pointing out these options.. 

Thanks, can you also do

nmap scanme.nmap.org

David Fifield



_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/