Re: Nmap/netwag problem.

[Josh Zlatin-Amishav <josh () tkos co il>]

On Tue, 9 Aug 2005, Aleph One wrote:

> Hi all,
>       I faced a problem running two tools producing totally different results.
> What i did is described as ...I ran nmap on a IP with these parameters
> : syn scan,dont ping,very verbose ,aggressive scan..it showed ports 80
> n 1723 filtered.I ran this scan from Linux box.
> Same time ,i used netwag to scansame ip which showed these ports open.

Nmap reports ports as filtered whenever packets are dropped. Try adding version
detection to the nmap scan, that will try to verify if the ports are
actually open and change there status accordingly. Your best bet though
is probably to manually check the ports with hping.

--
 - Josh

> What can be the problem..??please help.
>
> Aleph

------------------------------------------------------------------------------
FREE WHITE PAPER - Wireless LAN Security: What Hackers Know That You Don't

Learn the hacker's secrets that compromise wireless LANs. Secure your
WLAN by understanding these threats, available hacking tools and proven
countermeasures. Defend your WLAN against man-in-the-Middle attacks and
session hijacking, denial-of-service, rogue access points, identity
thefts and MAC spoofing. Request your complimentary white paper at:

http://www.securityfocus.com/sponsor/AirDefense_pen-test_050801
-------------------------------------------------------------------------------