LinuxQuestions.org
Go Job Hunting at the LQ Job Marketplace
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > CentOS (*)
User Name
Password
CentOS (*) This forum is for the discussion of CentOS Linux. Note: This forum does not have any official participation.

Notices

Reply
 
Search this Thread
Old 07-29-2014, 09:40 AM   #1
ShevyRoots
LQ Newbie
 
Registered: Dec 2013
Posts: 5

Rep: Reputation: Disabled
nmap -sP x.x.x.x show host up, but mtr --report x.x.x.x provide no results. Why?


nmap -sP x.x.x.x show host up, but mtr --report x.x.x.x provide no results. Why?

I can't provide the real IP..

Thanks!!
mylinuxserver# mtr --report xx.xx.xx.xx
HOST: mylinuxserver Loss% Snt Last Avg Best Wrst StDev
mylinuxserver#

mylinuxserver# nmap -sP xx.xx.xx.xx -PN

Starting Nmap 5.21 ( http://nmap.org ) at 2014-07-29 13:28 GMT
Nmap scan report for xx.xx.xx.xx
Host is up.
Nmap done: 1 IP address (1 host up) scanned in 13.00 seconds
 
Old 07-29-2014, 09:52 AM   #2
szboardstretcher
Senior Member
 
Registered: Aug 2006
Location: Detroit, MI
Distribution: GNU/Linux systemd
Posts: 3,369
Blog Entries: 1

Rep: Reputation: 1088Reputation: 1088Reputation: 1088Reputation: 1088Reputation: 1088Reputation: 1088Reputation: 1088Reputation: 1088
Well,.. what do you get if you run an nmap traceroute?

Code:
nmap -sn --traceroute xx.xx.xx.xx
 
Old 07-29-2014, 11:56 AM   #3
ShevyRoots
LQ Newbie
 
Registered: Dec 2013
Posts: 5

Original Poster
Rep: Reputation: Disabled
nmap -sn --traceroute results is below.. Thanks :)

mylinuxserver# nmap -sn --traceroute xx.xx.xx.xx -PN

Starting Nmap 5.21 ( http://nmap.org ) at 2014-07-29 15:52 GMT
Failed to find device eth2 which was referenced in /proc/net/route
Nmap scan report for xx.xx.xx.xx
Host is up.

TRACEROUTE (using proto 1/icmp)
HOP RTT ADDRESS
1 ... 30

Nmap done: 1 IP address (1 host up) scanned in 22.15 seconds
 
Old 07-29-2014, 01:04 PM   #4
szboardstretcher
Senior Member
 
Registered: Aug 2006
Location: Detroit, MI
Distribution: GNU/Linux systemd
Posts: 3,369
Blog Entries: 1

Rep: Reputation: 1088Reputation: 1088Reputation: 1088Reputation: 1088Reputation: 1088Reputation: 1088Reputation: 1088Reputation: 1088
Right. So there isn't a traceroute to see. That is why mtr isn't reporting anything.
 
Old 08-22-2014, 11:55 AM   #5
bonsaiviking
LQ Newbie
 
Registered: Aug 2014
Posts: 5

Rep: Reputation: Disabled
You are using the `-PN` flag, which means "Treat this host as up, without sending any packets to confirm." That is why Nmap thinks the host is up. You can see more info with `--reason`, which will show "Host is up, received user-set."

If you remove the `-PN` option and Nmap finds the address up, then it is because it is responding to one of the default host discovery probes. I'm not sure what mtr uses, but I'd guess it's an ICMP Echo Request (a.k.a. Ping). Nmap uses that as well as 2 different TCP probes and an ICMP Timestamp Request probe by default, if you run it with root permissions. Otherwise, it uses TCP connections to port 80 and 443 to determine if the host is up.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Why does NMAP report â??Host seems downâ? despite host responding to ping? android-eve Linux - Networking 5 11-21-2011 03:35 PM
mtr results highlighting/flashing SupportTech Linux - Networking 1 12-14-2010 10:08 AM
Different nmap results Andriy Linux - Security 3 06-01-2006 09:22 AM
nmap results djcomplex Linux - Software 3 03-20-2004 02:46 PM
nmap results richlawson Linux - Security 6 12-16-2003 04:26 PM


All times are GMT -5. The time now is 03:20 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration