Hello everybody,
I just wanna know if the nmap-Issue with the -O option will be fixed on
OpenBSD (some day..).
Just a little scan against hackin9.
# nmap -P0 -sV -p22,80,443 -T1 -vvv -O www.hakin9.org
Initiating SYN Stealth Scan against host-ip84-243.crowley.pl
(62.111.243.84) [3 ports] at 07:45
SYN Stealth Scan Timing: About 50.00% done; ETC: 07:46 (0:00:30 remaining)
Discovered open port 22/tcp on 62.111.243.84
Discovered open port 80/tcp on 62.111.243.84
The SYN Stealth Scan took 45.74s to scan 3 total ports.
Initiating service scan against 2 services on host-ip84-243.crowley.pl
(62.111.243.84) at 07:45
The service scan took 7.25s to scan 2 services on 1 host.
For OSScan assuming port 22 is open, 443 is closed, and neither are
firewalled
sendto in send_ip_packet: sendto(3, packet, 60, 0, 62.111.243.84, 16) =>
No route to host
Sleeping 15 seconds then retrying
[and some more Timeouts....*wait wait*...]
The same scan just without the -O option.
# nmap -P0 -sV -p22,80,443 -T1 -vvv www.hakin9.org
Starting nmap 3.81 ( http://www.insecure.org/nmap/ ) at 2005-09-16 07:49
CEST
Initiating SYN Stealth Scan against host-ip84-243.crowley.pl
(62.111.243.84) [3 ports] at 07:49
Discovered open port 80/tcp on 62.111.243.84
SYN Stealth Scan Timing: About 50.00% done; ETC: 07:50 (0:00:30 remaining)
Discovered open port 22/tcp on 62.111.243.84
The SYN Stealth Scan took 45.23s to scan 3 total ports.
Initiating service scan against 2 services on host-ip84-243.crowley.pl
(62.111.243.84) at 07:50
The service scan took 5.76s to scan 2 services on 1 host.
Host host-ip84-243.crowley.pl (62.111.243.84) appears to be up ... good.
Interesting ports on host-ip84-243.crowley.pl (62.111.243.84):
PORT STATE SERVICE VERSION
22/tcp open ssh OpenSSH 3.9p1 (protocol 1.99)
80/tcp open http Apache httpd 2.0.52 ((Aurox Linux))
443/tcp closed https
Nmap finished: 1 IP address (1 host up) scanned in 51.399 seconds
Raw packets sent: 3 (120B) | Rcvd: 6 (260B)
I notice this behavior just on OpenBSD and PF dosn't affected my scan.
And as you can see it works absolutly fine without the -O option.
I don't think it's a nmap-related problem but I wasn't able to figure
out what's the problem on OpenBSD exactly. :-/
I would be happy if somebody (maybe with more experience) could explain
me how and why the -O option leads to "No Route To Host".
Kind regards,
Sebastian
p.s.
I used a normal x86 (Duron) with OpenBSD 3.8 (Stable).
