LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > CentOS
User Name
Password
CentOS This forum is for the discussion of CentOS Linux. Note: This forum does not have any official participation.

Notices


Reply
  Search this Thread
Old 07-29-2014, 08:40 AM   #1
ShevyRoots
LQ Newbie
 
Registered: Dec 2013
Posts: 5

Rep: Reputation: Disabled
nmap -sP x.x.x.x show host up, but mtr --report x.x.x.x provide no results. Why?


nmap -sP x.x.x.x show host up, but mtr --report x.x.x.x provide no results. Why?

I can't provide the real IP..

Thanks!!
mylinuxserver# mtr --report xx.xx.xx.xx
HOST: mylinuxserver Loss% Snt Last Avg Best Wrst StDev
mylinuxserver#

mylinuxserver# nmap -sP xx.xx.xx.xx -PN

Starting Nmap 5.21 ( http://nmap.org ) at 2014-07-29 13:28 GMT
Nmap scan report for xx.xx.xx.xx
Host is up.
Nmap done: 1 IP address (1 host up) scanned in 13.00 seconds
 
Old 07-29-2014, 08:52 AM   #2
szboardstretcher
Senior Member
 
Registered: Aug 2006
Location: Detroit, MI
Distribution: GNU/Linux systemd
Posts: 4,278

Rep: Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694
Well,.. what do you get if you run an nmap traceroute?

Code:
nmap -sn --traceroute xx.xx.xx.xx
 
Old 07-29-2014, 10:56 AM   #3
ShevyRoots
LQ Newbie
 
Registered: Dec 2013
Posts: 5

Original Poster
Rep: Reputation: Disabled
nmap -sn --traceroute results is below.. Thanks :)

mylinuxserver# nmap -sn --traceroute xx.xx.xx.xx -PN

Starting Nmap 5.21 ( http://nmap.org ) at 2014-07-29 15:52 GMT
Failed to find device eth2 which was referenced in /proc/net/route
Nmap scan report for xx.xx.xx.xx
Host is up.

TRACEROUTE (using proto 1/icmp)
HOP RTT ADDRESS
1 ... 30

Nmap done: 1 IP address (1 host up) scanned in 22.15 seconds
 
Old 07-29-2014, 12:04 PM   #4
szboardstretcher
Senior Member
 
Registered: Aug 2006
Location: Detroit, MI
Distribution: GNU/Linux systemd
Posts: 4,278

Rep: Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694
Right. So there isn't a traceroute to see. That is why mtr isn't reporting anything.
 
Old 08-22-2014, 10:55 AM   #5
bonsaiviking
LQ Newbie
 
Registered: Aug 2014
Posts: 7

Rep: Reputation: Disabled
You are using the `-PN` flag, which means "Treat this host as up, without sending any packets to confirm." That is why Nmap thinks the host is up. You can see more info with `--reason`, which will show "Host is up, received user-set."

If you remove the `-PN` option and Nmap finds the address up, then it is because it is responding to one of the default host discovery probes. I'm not sure what mtr uses, but I'd guess it's an ICMP Echo Request (a.k.a. Ping). Nmap uses that as well as 2 different TCP probes and an ICMP Timestamp Request probe by default, if you run it with root permissions. Otherwise, it uses TCP connections to port 80 and 443 to determine if the host is up.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Why does NMAP report â??Host seems downâ? despite host responding to ping? android-eve Linux - Networking 5 11-21-2011 02:35 PM
mtr results highlighting/flashing SupportTech Linux - Networking 1 12-14-2010 09:08 AM
Different nmap results Andriy Linux - Security 3 06-01-2006 08:22 AM
nmap results djcomplex Linux - Software 3 03-20-2004 01:46 PM
nmap results richlawson Linux - Security 6 12-16-2003 03:26 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > CentOS

All times are GMT -5. The time now is 08:40 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration