Author Topic: Strange results with nmap ping scan  (Read 1303 times)

0 Members and 1 Guest are viewing this topic.

Offline spark

  • Serf
  • *
  • Posts: 30
  • Cookies: 3
    • View Profile
Strange results with nmap ping scan
« on: September 18, 2012, 06:29:19 pm »
Hi everyone

I have performed a ping scan with nmap from backtrack5 under virtualbox 4.1.10, and it shows all hosts in request as up!



and trying the same thing with Fedora, i get a correct result:



anyone can help and tell me from where i get the spoofed RST packages (in bt5) when the host i not up?

In both cases i use nmap version 6.01

EDIT: Fedora is the host OS
« Last Edit: September 18, 2012, 06:34:23 pm by spark »

Offline spark

  • Serf
  • *
  • Posts: 30
  • Cookies: 3
    • View Profile
Re: Strange results with nmap ping scan
« Reply #1 on: September 19, 2012, 05:28:30 pm »
Already 28 views and not an answer yet..  ::)
well it is either  a noob question  ;D , or a vague one..
Anyone to give a feedback in both cases?

Offline s3my0n

  • Knight
  • **
  • Posts: 276
  • Cookies: 58
    • View Profile
    • ::1
Re: Strange results with nmap ping scan
« Reply #2 on: September 20, 2012, 01:18:19 am »
Not sure about this one. Probably something to do with VirtualBox network settings. Have you got "bridging" in VB network setting for this virtual machine? Enable that.

Also you can try doing it the new way with "-sn --reason" . I think "-sP" is deprecated (man nmap | grep SP doesn't show this option anymore).

Read the latest documentation at:
Code: [Select]
http://nmap.org/book/man-host-discovery.html
« Last Edit: September 20, 2012, 01:19:13 am by s3my0n »
Easter egg in all *nix systems: E(){ E|E& };E

Offline spark

  • Serf
  • *
  • Posts: 30
  • Cookies: 3
    • View Profile
Re: Strange results with nmap ping scan
« Reply #3 on: September 23, 2012, 06:36:50 pm »
Thank you for your help, the problem was the with the virtualbox networking configuration
seems that when it is set to NAT (defualt) , The VirtualBox NAT device reset the connection for some reason..