Nmap 4.00 with Fyodor

Nmap 4.00 with Fyodor
Federico Biancuzzi, 2006-01-31

After more than eight years since its first release in Phrack magazine, Fyodor has announced Nmap 4.00. Curious as usual, Federico Biancuzzi interviewed Fyodor on behalf of SecurityFocus to discuss the new port scanning engine, version detection improvements, and the new stack fingerprinting algorithm under work by the community.

Expand all | Post comment

Great Interview! 2006-01-31
NoCode

Nmap 4.00 with Fyodor 2006-02-01
assurbanipal

Nmap 4.00 with Fyodor 2006-02-01
NSP

Nmap 4.00 with Fyodor 2006-02-02
white_marker

Nmap 4.00 with Fyodor 2006-02-03
Lacuta

Phrack 60 article 2006-02-05
Anonymous

Nmap 4.00 with Fyodor 2006-02-07
PJP

Nmap 4.00 with Fyodor 2006-02-11
DT

Nmap 4.00 with Fyodor 2006-10-11
Hari Sekhon

Using 4.11 still makes some printers spew out garbage because they also listen on 9101-9107. I have 2 printers on my network which do this, the third doesn't. It is possible that other printers use 9108 and beyond but I haven't seen this.

Therefore I proposed a service probe exclusion for the ports 9101 - 9107 as well as just 9100. Fyodor agreed and hopefully we will see this in the next version. if you are using 4.11 or older I suggest making sure you have a line like

Exclude T:9100-9107

in /usr/share/nmap/nmap-service-probes (path may vary according to your system).

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/384/33937#33937