Nmap Output and Misc
Okay, let's go through some of the miscellaneous options and some of the other things that we've not discussed already, some of the miscellaneous options we have actually touched on already, but I'm just going to revisit them again as they're part of this section here.
So let's pop onto this tab and we have something that you will be very familiar with.
The -V V or just V is verbose level one, verbose level two, verbose level three and so on.
So we can run this and we will essentially get more output.
And of course, if we run without this and press V, I was a bit too slow there by press V during it, then we will get verbose outport.
And the more times I press v while it's running, the more verbose, the output will be, and that is the same for this as well.
But this is D and this is debug increase.
Debug level is useful when you create LUA script, when you want you to do the debugging on those.
So let's give this a go yeah, we can see the output there, all the ports that are closed, et cetera, et cetera.
And like I said, you can press D when it's doing the scan itself, they go that's, that - -
As reason you can display the reason a port is in a particular state and you get the same output or you see the reason out, but when you do eight minus a VV to.
So we do that and we can see there.
The reason is we've got SYN-ACK back, which we've seen before, and we've also got the open out at the end of it, which we've seen before.
So it will only show open or possibly open ports.
It return on that one and we can see there the open or possibly open ports no more I'm tacking onto the end.
Here is this dash dash packet dash trace.
This will show all packets sent and received.
Okay, so click on that. And there we go.
You can see all those packets going backwards and forwards source IP address source port target, IP address, target port.
Yeah. Let me show you an example of why that might be useful.
So if we change the source port 53, we can actually check to see whether it actually works or. And there we go.
And we can see, of course, this is the IP address of this machine and it's sending it out from source port 53.
And if I was a little bit quick there, that was the command - - source - port.
We also showed that with minus G on previous examples, which would be exactly the same.
Let's just change that to G and there we go.
And we can see the source port is 53. It's doing it as it is.
There's Nmap -- I F lists the shows, the host interfaces and routes for debugging.
This is what's useful for debugging is most likely IP command, the route command or netstat command, but just simply using Nmap.
And a, there you go.
That's the output, I guess, useful.
If you don't have access to those command.
You can resume an aborted scan.
If a scan dies for whatever reason or by pressing control C resuming, the scan may be possible if a normal scan or a graphable log was kept with the scan.
And you were far enough through that scan, the user can ask Nmap to resume scanning with the target that it was working on when the executions.
And you specify this with the minus minus resume option and past the normal or grievable output file as its argument.
And no other arguments are permitted.
Otherwise it won't work Nmap can scan IPV six and you can see here an example with the -six and then an IPV six IP address.
And that we'll go ahead and do the scan.
If you are an IPV six network.
Another useful option.
If you want to do a complete scan is to use the -A, this enables OS detection, version detection, script scanning, and trace route with just the -A.
So think of it as A, as in all. So let's run this take a little bit of time.
Cause we've got version of OS in there.
There we go.
And we get the results back.
And as you can see there, we've got OS detection, version detection, scripts scanning.
And the trace route at the end of over to this tab, that -A is essentially the same as doing all of those four.
And that was the resource that we got back as you've just seen.
So those are the Nmap, miscellaneous options -A is quite a useful one.