Nmap Development mailing list archives
is this normal behavior?
From: "Mike ." <dmciscobgp () hotmail com>
Date: Sun, 23 Nov 2014 12:05:35 +0000
i was simply trying to see if my router here at home supported various types of ICMP queries like most edge routers do. i ran the flags as the following nmap -vv -n -PE -sn 192.168.0.1 -packet-trace Starting Nmap 6.45 ( http://nmap.org ) at 2014-11-23 05:52 Central Standard Time Initiating ARP Ping Scan at 05:52Scanning 192.168.0.1 [1 port]SENT (0.1460s) ARP who-has 192.168.0.1 tell 192.168.0.16RCVD (0.1460s) ARP reply 192.168.0.1 is-at 50:39:55:44:F5:AECompleted ARP Ping Scan at 05:52, 0.07s elapsed (1 total hosts)Nmap scan report for 192.168.0.1Host is up (0.00s latency).MAC Address: 50:39:55:44:F5:AE (Cisco Spvtg)Read data files from: C:\Program Files\NmapNmap done: 1 IP address (1 host up) scanned in 0.17 seconds Raw packets sent: 1 (28B) | Rcvd: 1 (28B) i see no ICMP being built at all, is this normal? i noticed if i set the IP to something outside the local subnet the ICMPs are sent. newbie question here, why is this? should they still be sent even on a local subnet? i could just PING from console, why not the same with a ping scan from nmap? * also, why does it say "1 port" even when i specified NO PORT SCAN? (Scanning 192.168.0.1 [1 port]) thanks!m
_______________________________________________ Sent through the dev mailing list http://nmap.org/mailman/listinfo/dev Archived at http://seclists.org/nmap-dev/
Current thread:
- is this normal behavior? Mike . (Nov 23)
- Re: is this normal behavior? Jacek Wielemborek (Nov 23)