Me again ;P

[<fratley () soursoft com>]

Hey, thanks for the help before. I've gotten the command line version of
nmap to work, but I haven't had success with anything but connect scans.
I've tried connect and SYN on the same hosts, but SYN just seems to hang
there. When the SYN scan begins, there's some action of the follwing type
in Windump:

arp who-has [host1] tell [host2]

but after a few lines of that there isn't any communication that I can
see. Would that be due to the connection never actually being completed? I
really have no idea. ;) Thanks.

~Fratley

> the -P0 will scan w/out having to ping.....the -v option is verbose
> output and the ip i gave you is not firewalled..more than likely had
> something to do w/ it
> ----- Original Message -----
> From: <fratley () soursoft com>
> To: <phaseone () sio midco net>
> Sent: Friday, June 20, 2003 8:07 PM
> Subject: Re: Windows 98 - Can't get anything to work?
>
>
> > Seems to be working. ;) It's been going for like five minutes. What
> > was it about those options that caused it to work where the other
> > tries failed?
> >
> > > try to scan this ip 69.9.203.50
> > > use this option nmap -sT -v -P0 (ip)
> > > the servefail is a dns error saying it can't find the name -----
> > ----- Original Message -----
> > > From: <fratley () soursoft com>
> > > To: <phaseone () sio midco net>
> > > Sent: Friday, June 20, 2003 7:34 PM
> > > Subject: Re: Windows 98 - Can't get anything to work?
> > >
> > >
> > > > Well there seems to be some communication going. I've seen ServFail
> > a few times, I'm not really experienced with packet sniffing so I'm
> > not sure what to expect. When the scan first starts it looks like
> > the program is finding the target but from then on nothing is sent
> > or received until the report that the host seemed to be down.
> > > > > while you scan..get a packet sniffer like windump..watch your
> > > > traffic as it leaves and watch for a reply , if any...it is ALWAYS
> > good to have a sniffer running as you scan..otherwise you are
> > "scanning blindly" ----- Original Message -----
> > > > > From: <fratley () soursoft com>
> > > > > To: <phaseone () sio midco net>
> > > > > Sent: Friday, June 20, 2003 7:10 PM
> > > > > Subject: Re: Windows 98 - Can't get anything to work?
> > > > >
> > > > >
> > > > > > Same result. I was watching my connection too, didn't get any
> > bytes
> > > > being sent or received. Any ideas?
> > > > > > > ok ..so scan me right now ...and email when you are about to
> > do
> > > > > > it.....so i can see if you are reaching even the target..it
> > sounds
> > > > like the box you are going after is silently firewalling you
> > > > > > > here-------69.9.203.193
> > > > > > > ----- Original Message -----
> > > > > > > From: <fratley () soursoft com>
> > > > > > > To: <phaseone () sio midco net>
> > > > > > > Sent: Friday, June 20, 2003 7:01 PM
> > > > > > > Subject: Re: Windows 98 - Can't get anything to work?
> > > > > > >
> > > > > > >
> > > > > > > > Well, here's the result I got.
> > > > > > > >
> > > > > > > > Starting nmap V. 3.00 ( www.insecure.org/nmap )
> > > > > > > > The first host is 68, and the last one is 68
> > > > > > > > The first host is 58, and the last one is 58
> > > > > > > > The first host is 112, and the last one is 112
> > > > > > > > The first host is 8, and the last one is 8
> > > > > > > > Packet capture filter: (icmp and dst host 209.226.116.172) or
> > > > (tcp
> > > > > > and dst host 209.226.116.172 and ( dst port 50161 or dst port
> > 50162
> > > > or dst port 50163 or dst port 50164 or dst port 50165))
> > > > > > > > Finished block: srtt: -1 rttvar: -1 timeout: 6000000
> > > > block_tries: 5
> > > > > > up_this_block: 0 down_this_block: 0 group_sz: 1
> > > > > > > > massping done:  num_hosts: 1  num_responses: 0
> > > > > > > > Host  (68.58.112.8) appears to be down, skipping it.
> > > > > > > > Port 5000 proto udp is duplicated in services file C:\PROGRAM
> > > > > > FILES\NMAPWIN\BIN/../data/nmap-services
> > > > > > > > Note: Host seems down. If it is really up, but blocking our
> > ping
> > > > > > probes, try -P0
> > > > > > > > Nmap run completed -- 1 IP address (0 hosts up) scanned in 59
> > > > > > seconds
> > > > > > > > The only information I can gather from it is that the ping
> > > > didn't
> > > > > > work out. Trying -P0 causes the program to hang indefinitely.
> > > > > > > > I did have a software firewall running but I uninstalled that
> > > > and
> > > > > > rebooted hoping that would help. Otherwise, I've got a direct
> > > > connection. Thanks.
> > > > > > > > ~Fratley
> > > > > > > >
> > > > > > > >
> > > > > > > > > you could possibly be behind a firewall -your default
> > gateway
> > > > > > that
> > > > > > > > is-------try setting the --debug option to see what nmap is
> > > > telling
> > > > > > you-----mike.
> > > > > > > > > ----- Original Message -----
> > > > > > > > > From: <fratley () soursoft com>
> > > > > > > > > To: <nmap-dev () insecure org>
> > > > > > > > > Sent: Friday, June 20, 2003 6:28 PM
> > > > > > > > > Subject: Windows 98 - Can't get anything to work?
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > > Hey, I've been having a lot of trouble getting nmap to
> > > > function
> > > > > > > > correctly. I know you've heard of this problem before, but
> > > > there's
> > > > > > like exactly zero documentation of things like this so I'm not
> > sure
> > > > how to fix it or if it's been fixed already.
> > > > > > > > > > I'm running Windows 98 SE, a 56k, and NMapWin v1.3.1. I
> > get:
> > > > > > > > > > Starting nmap V. 3.00 ( www.insecure.org/nmap )
> > > > > > > > > > Note: Host seems down. If it is really up, but blocking
> > our
> > > > ping
> > > > > > > > probes, try -P0
> > > > > > > > > > Nmap run completed -- 1 IP address (0 hosts up) scanned in
> > 51
> > > > > > > > seconds
> > > > > > > > > > Using -P0 doesn't seem to help at all. Any ideas?
> > > > > > > > > >
> > > > > > > > > > ~Fratley
> > > >
> > > > ---------------------------------------------------------------------
> > > > > > > > For help using this (nmap-dev) mailing list, send a blank
> > email
> > > > to
> > > > > > nmap-dev-help () insecure org . List run by ezmlm-idx
> > (www.ezmlm.org).




---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).