Menu

Main Menu
Talk Get Daily Search

Member's Online

    User Name
    Password

    nmap output question

    Reply
    Tintin | # 1 | 2009-12-04, 09:05 | Report

    A few nmap questions (N810):

    1) When running

    ~ $ nmap -sP 192.168.1.0/24

    I get this:

    Starting Nmap 4.76 ( http://nmap.org ) at 2009-12-04 00:38 PST
    Host 192.168.1.1 appears to be up.
    Host 192.168.1.100 appears to be up.
    Host 192.168.1.105 appears to be up.
    Nmap done: 256 IP addresses (3 hosts up) scanned in 5.02 seconds

    I take this to mean that there are currently three devices connected to the network.
    I can confirm the 105 being my tablet.

    Q: Is there anyway to see device names in addition to the IP addresses?
    Q: Is there anyway to see the device OS displayed per device?
    (I tried ~ $ nmap -sP -A 192.168.1.0/24 - but no go).


    2) I'm using nmap 4.76 but I understand there is a 5.0 version out there for OS2008 - I've been unable to find the repo for nmap OS2008 though. Anyone knows?

    Edit | Forward | Quote | Quick Reply | Thanks

     
    Tintin | # 2 | 2009-12-04, 18:42 | Report

    And, in addition to the above, is the 192.168.1.1 always just the wifi router?

    Edit | Forward | Quote | Quick Reply | Thanks

     
    speculatrix | # 3 | 2009-12-06, 00:03 | Report

    by convention, the first address in a block of IP addresses is used for the default gateway/router, so, yes, 192.168.X.1 is quite typical for adsl modem/routers or routers for cable connections.


    host names often come from the device running avahi (aka bonjour) or samba (windows file sharing). these might show up in File Manager. sometimes you can get some joy by doing "smbclient -L 192.168.1.2" and seeing what it says.

    Edit | Forward | Quote | Quick Reply | Thanks
    The Following User Says Thank You to speculatrix For This Useful Post:
    Tintin

     
    Tintin | # 4 | 2009-12-06, 00:10 | Report

    Originally Posted by speculatrix View Post
    by convention, the first address in a block of IP addresses is used for the default gateway/router, so, yes, 192.168.X.1 is quite typical for adsl modem/routers or routers for cable connections.


    host names often come from the device running avahi (aka bonjour) or samba (windows file sharing). these might show up in File Manager. sometimes you can get some joy by doing "smbclient -L 192.168.1.2" and seeing what it says.
    Hey and thanks. I've started using autoscan on my N810 as it has a rather nice UI and presents data like OS, host name, etc.

    Edit | Forward | Quote | Quick Reply | Thanks

     
    Tintin | # 5 | 2009-12-06, 00:37 | Report

    Originally Posted by speculatrix View Post
    host names often come from the device running avahi (aka bonjour) or samba (windows file sharing). these might show up in File Manager. sometimes you can get some joy by doing "smbclient -L 192.168.1.2" and seeing what it says.
    If I got it right, OS2008 has Samba share support.
    I assume that when there are shared folders available they will show up as 'Shared Folders" in File Manager. (Or do I have to first use something like Wizard Mounter?).

    The smbclient command you included is that for xterm command line?
    I don't even know/think I got an executable 'smbclient'.

    Edit | Forward | Quote | Quick Reply | Thanks

    Last edited by Tintin; 2009-12-06 at 00:43.

     
    MrWh1t3 | # 6 | 2009-12-09, 09:27 | Report

    Originally Posted by Tintin View Post
    A few nmap questions (N810):

    1) When running

    ~ $ nmap -sP 192.168.1.0/24

    I get this:

    Starting Nmap 4.76 ( http://nmap.org ) at 2009-12-04 00:38 PST
    Host 192.168.1.1 appears to be up.
    Host 192.168.1.100 appears to be up.
    Host 192.168.1.105 appears to be up.
    Nmap done: 256 IP addresses (3 hosts up) scanned in 5.02 seconds

    I take this to mean that there are currently three devices connected to the network.
    I can confirm the 105 being my tablet.

    Q: Is there anyway to see device names in addition to the IP addresses?
    Q: Is there anyway to see the device OS displayed per device?
    (I tried ~ $ nmap -sP -A 192.168.1.0/24 - but no go).


    2) I'm using nmap 4.76 but I understand there is a 5.0 version out there for OS2008 - I've been unable to find the repo for nmap OS2008 though. Anyone knows?
    It all depends on whether or not there is a fingerprint within Nmap. Namp uses OS fingerprints.

    You could use the -O for OS fingerprinting

    Try: nmap -sV -p- -O -T4 192.168.1.1-255

    Also - http://nmap.org/book/man-briefoptions.html
    Buy this - http://nmap.org/book/

    Edit | Forward | Quote | Quick Reply | Thanks

    Last edited by MrWh1t3; 2009-12-09 at 09:32.

     
vBulletin® Version 3.8.8
Normal Logout