Nmap Development mailing list archives

is this normal behavior?


From: "Mike ." <dmciscobgp () hotmail com>
Date: Sun, 23 Nov 2014 12:05:35 +0000

i was simply trying to see if my router here at home supported various types of ICMP queries like most edge routers do. 
i ran the flags as the following
nmap -vv -n -PE -sn  192.168.0.1  -packet-trace
Starting Nmap 6.45 ( http://nmap.org ) at 2014-11-23 05:52 Central Standard Time
Initiating ARP Ping Scan at 05:52Scanning 192.168.0.1 [1 port]SENT (0.1460s) ARP who-has 192.168.0.1 tell 
192.168.0.16RCVD (0.1460s) ARP reply 192.168.0.1 is-at 50:39:55:44:F5:AECompleted ARP Ping Scan at 05:52, 0.07s elapsed 
(1 total hosts)Nmap scan report for 192.168.0.1Host is up (0.00s latency).MAC Address: 50:39:55:44:F5:AE (Cisco 
Spvtg)Read data files from: C:\Program Files\NmapNmap done: 1 IP address (1 host up) scanned in 0.17 seconds           
Raw packets sent: 1 (28B) | Rcvd: 1 (28B)
i see no ICMP being built at all, is this normal? i noticed if i set the IP to something outside the local subnet the 
ICMPs are sent. newbie question here, why is this? should they still be sent even on a local subnet? i could just PING 
from console, why not the same with a ping scan from nmap?
* also, why does it say "1 port" even when i specified NO PORT SCAN?  (Scanning 192.168.0.1 [1 port])
thanks!m                                          
_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/

Current thread: