1

[all variants] Understanding nmap output

view story
linux-howto

http://ubuntuforums.org – I just inherited a new desktop at school/work and need some help understanding the nmap output. I ran nmap with nmap-online.com and got this output: Code: PORT    STATE    SERVICE 22/tcp  open    ssh 111/tcp filtered rpcbind 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 179/tcp filtered bgp 445/tcp filtered microsoft-ds 515/tcp filtered printer I understand the ssh port but there used to be a windows partition on this machine (I removed it). I don't really know what these other ports are for or what I should do about it. Thanks! (Hardware)

dayu's picture
Submitted by dayu on 10/04/2012

Stories similar to [all variants] Understanding nmap output

I was scanning one of my friends servers using nmap and got these port details.

Extremely slow machine 3 years 20 weeks ago

Hello,

I run F12. Since some days my laptop has become very sluggish. In Mozilla, switching between the tabs takes like seconds instead of fraction of a second. Also minimizing and mximizing windows takes long. Switching between the windows too takes long. Now I can't see the cursor while typing this post.

nmap scan only state of port 27 weeks 5 days ago

Is it possible with nmap to check only the state of a port whether- open, closed or filtered and NOT the services behind it?

The aim is to speed up scan results. Since UDP scan is also involved it is taking forever to complete.

That aside what could be done to speed up nmap UDP scans? The one I'm using is:

nmap -n -sS -sU -p1-65535 -oN scan_out -iL hosts

I have a Quake 3 server.

egrep getting numbers only 1 year 3 weeks ago

Hello, I am kind of a noob with unix, so i'd like some help.

java vulnerability poison ivy 42 weeks 11 hours ago

Yeah, I intuit that Mac and Win are much more at risk.

F16 Vino not starting 11 weeks 5 days ago

I wanted to use vino to share my desktop on a F16 installation. I followed the instruction #3 here.

The setting took, but the vncserver was not started.

nmap -p 5900 shows the port is still closed.

I am trying to setup a remote SOLR server that uses port 8983.

I have no firewall running on that remote server.

nmap shows port 8983 on that remote server as filtered when checking from another server.

nmap on solr server

netstat -tanpu | grep 8983

:::* LISTEN 7687/javatcp 0 0 :::8983

I can access fine solr in the browser by going to remote_se

I'm trying to find out where a port is being blocked by a firewall; either en-route to a host or by the host itself.

If I run nmap I can see that the port is filtered. However, this could mean by the host 192.168.1.74 or any firewall in between.