[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Nmap -O... will it be fixed some day?



Hello everybody,

I just wanna know if the nmap-Issue with the -O option will be fixed on OpenBSD (some day..).

Just a little scan against hackin9.

# nmap -P0 -sV -p22,80,443 -T1 -vvv -O www.hakin9.org
Initiating SYN Stealth Scan against host-ip84-243.crowley.pl (62.111.243.84) [3 ports] at 07:45
SYN Stealth Scan Timing: About 50.00% done; ETC: 07:46 (0:00:30 remaining)
Discovered open port 22/tcp on 62.111.243.84
Discovered open port 80/tcp on 62.111.243.84
The SYN Stealth Scan took 45.74s to scan 3 total ports.
Initiating service scan against 2 services on host-ip84-243.crowley.pl (62.111.243.84) at 07:45
The service scan took 7.25s to scan 2 services on 1 host.
For OSScan assuming port 22 is open, 443 is closed, and neither are firewalled
sendto in send_ip_packet: sendto(3, packet, 60, 0, 62.111.243.84, 16) => No route to host
Sleeping 15 seconds then retrying
[and some more Timeouts....*wait wait*...]


The same scan just without the -O option.

# nmap -P0 -sV -p22,80,443 -T1 -vvv www.hakin9.org

Starting nmap 3.81 ( http://www.insecure.org/nmap/ ) at 2005-09-16 07:49 CEST
Initiating SYN Stealth Scan against host-ip84-243.crowley.pl (62.111.243.84) [3 ports] at 07:49
Discovered open port 80/tcp on 62.111.243.84
SYN Stealth Scan Timing: About 50.00% done; ETC: 07:50 (0:00:30 remaining)
Discovered open port 22/tcp on 62.111.243.84
The SYN Stealth Scan took 45.23s to scan 3 total ports.
Initiating service scan against 2 services on host-ip84-243.crowley.pl (62.111.243.84) at 07:50
The service scan took 5.76s to scan 2 services on 1 host.
Host host-ip84-243.crowley.pl (62.111.243.84) appears to be up ... good.
Interesting ports on host-ip84-243.crowley.pl (62.111.243.84):
PORT STATE SERVICE VERSION
22/tcp open ssh OpenSSH 3.9p1 (protocol 1.99)
80/tcp open http Apache httpd 2.0.52 ((Aurox Linux))
443/tcp closed https


Nmap finished: 1 IP address (1 host up) scanned in 51.399 seconds
              Raw packets sent: 3 (120B) | Rcvd: 6 (260B)

I notice this behavior just on OpenBSD and PF dosn't affected my scan.
And as you can see it works absolutly fine without the -O option.
I don't think it's a nmap-related problem but I wasn't able to figure out what's the problem on OpenBSD exactly. :-/
I would be happy if somebody (maybe with more experience) could explain me how and why the -O option leads to "No Route To Host".


Kind regards,
Sebastian

p.s.
I used a normal x86 (Duron) with OpenBSD 3.8 (Stable).