Re: XML output incomplete

[David Fifield <david () bamsoftware com>]

On Thu, Sep 03, 2020 at 03:59:46PM +0100, Owen Mooney wrote:
> Hi, I think I have discovered a bug where the XML output is incomplete with
> certain combinations of options. The command I am running is:
>
> nmap -T5 -sU -sS -PS22,80,443,445,3389,135,139 -PU53,161 -PE --traceroute
> --disable-arp-ping -sV -oX - 172.17.0.2
>
> The target host is a docker container running apache and listening on port 80.
> The XML output doesn't contain any <port> elements in this case. For some
> reason, using T4 or lower fixes this issue. I thought that perhaps the port was
> not being detected as open using T5, but I confirmed with wireshark that there
> is a SYN-ACK-RST on port 80, as well as some further traffic generated as part
> of the service detection phase (I assume). 

Is the port reported as open in normal output? I want to see if the
problem is specifically to do with XML output, or if it's more general.

You can save normal and XML output at the same time with
        -oN filename.txt -oX filename.xml
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/