NMAP QUESTION

From: cervica (naro_at_icap.net)
Date: 06/22/05

  • Next message: Andrew Schulman: "Re: NMAP QUESTION" 
    Date: Wed, 22 Jun 2005 10:26:44 -0400

            hello newbie here to linux.

    I have two questions:

    1. I ran nmap localhost on my linux system (Fedora Core2) and got the
    following:

    [root@dev root]$ nmap dev

    Starting nmap 3.50 ( http://www.insecure.org/nmap/ ) at 2005-06-22
    10:18 EDT
    Interesting ports on dev (127.0.0.1):
    (The 1650 ports scanned but not shown below are in state: closed)
    PORT STATE SERVICE
    21/tcp open ftp
    25/tcp open smtp
    80/tcp open http
    111/tcp open rpcbind
    873/tcp open rsync
    5801/tcp open vnc-http-1
    5901/tcp open vnc-1
    6001/tcp open X11:1
    8081/tcp open blackice-icecap
    32770/tcp open sometimes-rpc3

    Nmap run completed -- 1 IP address (1 host up) scanned in 1.181
    seconds
    [root@dev root]$

    What is blackice-icecap?? Is this the default firewall with Fedora?
    IPTABLES/Netfilter? Where can I find this on my system?

    2. After running an nmap scan against my system I get the following
    results:

    TCP Sequence Prediction: Class=random positive increments
                             Difficulty=3453555 (Good luck!)
    TCP ISN Seq. Numbers: A27DF379 A2CE22B0 A24361C6 A1E5AC5A A26CCB76
    IPID Sequence Generation: All zeros

    The IPID Sequence is all zeros. From my initial research I've done on
    google I've read that this is a problem with my linux kernel. Is this
    correct? Updating my kernel is fix this. Is this a problem? What
    are the consequences of this being all zeros?

    Thanks for any links and advice.

  • Next message: Andrew Schulman: "Re: NMAP QUESTION"

    Relevant Pages

    • Re: AW: Re: nmap -sS SYN-SCAN does not find all open Ports?
      ... Network Security Engineer and Analyst ... that there is actually no problem with nmap. ... ports that are not listed by nmap are in state closed. ... Could it somehow be related to my backend firewall? ...
      (Security-Basics)
    • Re: Nmap questions for the experts
      ... nmap has its own mailing lists, you can find those on insecure.org. ... Do you really use nmap before running nessus? ... Only open ports will be fed to ...
      (Security-Basics)
    • Re: Destined to be hacked?
      ... > 1 - What is the risk involved in having a non secure password on a non ... Of course they need to know the login name too. ... Just see to that people can't login as root, this makes it more difficult to ... > people sit there and scan ports just looking for anyone as well. ...
      (alt.linux)
    • Re: Destined to be hacked?
      ... Of course they need to know the login ... > to try out password for root user. ... >> people sit there and scan ports just looking for anyone as well. ... > installation, if you add php, avoid to use scripts that allows people to ...
      (alt.linux)
    • Re: UDP Scanning - how nmap really works
      ... > Seen as this method cannot be used, it does not seem feasible for nmap to generate any meaningful information in this ... > situation yet somehow it is differentiating between filtered and open udp ports. ... So how does it match PORT_FIREWALLED in UDP scanning? ... and still is marginally useful in internal networks with no filtering going on. ...
      (Pen-Test)