nmap help

[Jennifer Chan]

Hi,



My name is Jennifer and I am part of the network support team.



I am very new to your tool, but I see that it would be of great help to the
team.

I am trying to use nmap so that I can discover our entire network right now.
I have been using the router IPs as well as the WAN IPs of each terminating
device.



"# nmap -sL -P0 172.16.10.113 172.16.10.105



Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2006-09-08 15:46 MDT

Host 172.16.10.113 not scanned

Host 172.16.10.105 not scanned

Nmap finished: 2 IP addresses (0 hosts up) scanned in 13.008 seconds"



I can telnet to these routers IP just fine, but I can't seem to get the nmap
to scan these routers. I am running nmap from our firewall, so nothing
should be blocking it.





I was also told that nmap can be used to discover new and interesting
devices that are connected to our network. How do you do that without
providing any IPs to it?



Thank you in advance for all your help



Jennifer

Network Support Analyst

[KarMax]

Post by Jennifer Chan
I am trying to use nmap so that I can discover our entire network right now.
I have been using the router IPs as well as the WAN IPs of each terminating
device.
"# nmap -sL -P0 172.16.10.113 172.16.10.105

Ok... from the nmap man page:
-sL: List Scan - simply list targets to scan

EXAMPLES:
nmap -v -sP 192.168.0.0/16 10.0.0.0/8
SEE THE MAN PAGE FOR MANY MORE OPTIONS, DESCRIPTIONS, AND EXAMPLES

Or just go and read the docs
http://insecure.org/nmap/docs.html

Post by Jennifer Chan
I was also told that nmap can be used to discover new and interesting
devices that are connected to our network. How do you do that without
providing any IPs to it?

-iR <num hosts>: Choose random targets
nmap -v -iR 10000 -P0 -p 80
This will random scan hosts.

Bye

[curious one]

The problem seems to that you can not ping the devices and you are choosing
wrong type of scans. See if you have ping enabled on your network. Try the
following:

#nmap -sV -P0 172.16.10.1/24 <http://172.16.10.113/>
#nmap -sV -P0 172.16.10.105-113

Thats just basic. Refer to nmap man page or online documentation for details
on type of scans and other option you can use.
<http://172.16.10.113/>