Nmap Development mailing list archives

"no-response" vs "host-unreach"?


From: Daniel Griscom <griscom () suitable com>
Date: Fri, 6 Oct 2023 09:58:59 -0400

(Sorry if this is inappropriate for this list; let me know and I'll go away... ;)

I'm diagnosing an embedded product (no display) that's locked up. The network seems to be active, but no ports are open and the hardware console is unresponsive. I'd like to collect all the info I can about it, so I turned to nmap. The product isn't responding to pings, so I usd "-Pn".

Running "nmap -Pn <ip-address>" gave me:
All 1000 scanned ports on 10.3.4.42 are in ignored states.
Not shown: 990 filtered tcp ports (no-response), 10 filtered tcp ports (host-unreach)
I'd really like to know the difference between "no-response" and "host-unreach", and which ports reported which. What's the difference between the two states? How can I see which ports are in which states? And, any other suggestions on data I can gather with nmap?


Thanks,
Dan

P.S. Here's the complete output of the nmap run:
griscom@nob:~$ nmap -Pn -vvvv 10.3.4.42
Starting Nmap 7.94 ( https://nmap.org ) at 2023-10-06 08:50 EDT
Initiating Parallel DNS resolution of 1 host. at 08:50
Completed Parallel DNS resolution of 1 host. at 08:50, 0.00s elapsed
DNS resolution of 1 IPs took 0.00s. Mode: Async [#: 1, OK: 0, NX: 1, DR: 0, SF: 0, TR: 1, CN: 0]
Initiating Connect Scan at 08:50
Scanning 10.3.4.42 [1000 ports]
Completed Connect Scan at 08:50, 5.88s elapsed (1000 total ports)
Nmap scan report for 10.3.4.42
Host is up, received user-set (0.071s latency).
Scanned at 2023-10-06 08:50:24 EDT for 6s
All 1000 scanned ports on 10.3.4.42 are in ignored states.
Not shown: 990 filtered tcp ports (no-response), 10 filtered tcp ports (host-unreach)

Read data files from: /snap/nmap/3152/usr/bin/../share/nmap
Nmap done: 1 IP address (1 host up) scanned in 5.90 seconds
griscom@nob:~$

--
Daniel T. Griscom
152 Cochrane Street, Melrose, MA 02176-1433
(781) 662-9447  griscom () suitable com  http://www.suitable.com/
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at https://seclists.org/nmap-dev/

Current thread: