Port State NMAP Bug

[Arnaud Helin <arnaud.helin () approach be>]

Hi,

I would like to inform you that there is a very strange behavior of nmap during my port scan.
Below I give you the way to reproduce the problem.

Requirements:

- 1 Kali linux 1.0.8 (it's a Debian with different tool for pentest with nmap 6)
- 1 external ip address to portscan.

Behavior:

The port 80 is open, but sometimes it has been shown as "filtered" and sometimes "open/filtered", depending the scan 
range I did.

How to reproduce the problem:

- Launch kali
- In the command prompt, type: [first column is the command] [second column is the result]

nmap -n -vv -r -p70-90 37.205.42.129

80/tcp filtered http

nmap -n -vv -r -p80-80 37.205.42.129

80/tcp open  http

nmap -n -vv -r -p80-81 37.205.42.129

80/tcp open     http

nmap -n -vv -r -p79-81 37.205.42.129

80/tcp open     http

nmap -n -vv -r -p78-81 37.205.42.129

80/tcp open     http

nmap -n -vv -r -p77-81 37.205.42.129

80/tcp open     http

nmap -n -vv -r -p76-81 37.205.42.129

80/tcp open     http

nmap -n -vv -r -p70-81 37.205.42.129

80/tcp filtered http

nmap -n -vv -r -p75-81 37.205.42.129

80/tcp filtered http

nmap -n -vv -r -p76-82 37.205.42.129

80/tcp open     http

nmap -n -vv -r -p76-80 37.205.42.129

80/tcp open     http

nmap -n -vv -r -p75-80 37.205.42.129

80/tcp filtered http

nmap -n -vv -r -p75-80 --max-parallelism 1 37.205.42.129

80/tcp open     http

nmap -n -vv -r -p75-80 --max-parallelism 1 --max-rate 1 37.205.42.129

80/tcp filtered http

nmap -n -vv -r -p75-80 --max-parallelism 1 --max-rate 1 -PN 37.205.42.129

80/tcp open     http

nmap -n -vv -r -p75-80 --max-parallelism 1 -PN 37.205.42.129

80/tcp open     http

nmap -n -vv -r -p75-80 -PN 37.205.42.129

80/tcp open     http

nmap -n -vv -r -p50-80 -PN 37.205.42.129

80/tcp filtered http

nmap -n -vv -r -p50-80 --max-parallelism 1 -PN 37.205.42.129

80/tcp filtered http

nmap -n -vv -r -p50-80 --max-parallelism 1 --max-rate 1 -PN 37.205.42.129

80/tcp filtered http


Regards,

Arnaud Helin
Network and System Administrator
Approach Belgium - www.approach.be<http://www.approach.be/> - www.atlas-expat.com<http://www.atlas-expat.com/>
Axis Park - Rue Edouard Belin 7 - 1435 - Louvain-la-Neuve (Mt-St-Guibert) - Belgium
Tel: +32 10 83 21 37 - Mob: +32 477 24 75 46 - Fax: +32 10 83 21 50

_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/