Re: Nmap & Whonix Issue

[David Fifield <david () bamsoftware com>]

On Tue, Oct 16, 2012 at 07:54:01PM -0500, Distorchion Zero wrote:
> I've just configured a virtual environment with Whonix (the new TorBox from
> the Torproject http://sourceforge.net/p/whonix/wiki/Home/). It consists of
> one virtual machine running Tor proxy and the other machine would be the
> workstation.
>
> In the workstation I've been trying to run Nmap to scan ports of some
> hosts, but the result of the scan is always the same. It doesn't matter
> which host I'm scanning or which options I use, the result is the same. And
> it gets a lot of different types of open ports, from 0 to 65389.
>
> I'm starting to think that Nmap is actually scanning the proxy address I'm
> on at that moment. If this is the case what can I do in order to really
> scan the desired hosts? If it is not where do these ports come from?

Please send us the output of a small scan so we can better understand
what you're describing. Also the output of
        nmap --iflist
Please tell us the version of Nmap you're using.

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/