LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 07-13-2016, 03:26 PM   #1
postcd
Member
 
Registered: Oct 2013
Posts: 527

Rep: Reputation: Disabled
nmap alwys report "Host seems down."


Hello, nmap on Linux CentOS always report "Host seems down."

Quote:
# nmap ianfette.org;nmap ianfette.org -Pn;nmap -sP -vv --packet-trace google.com

Starting Nmap 5.51 ( http://nmap.org ) at 2016-07-13 15:22 EDT
Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn
Nmap done: 1 IP address (0 hosts up) scanned in 0.49 seconds

Starting Nmap 5.51 ( http://nmap.org ) at 2016-07-13 15:22 EDT
Nmap done: 1 IP address (0 hosts up) scanned in 0.50 seconds

Starting Nmap 5.51 ( http://nmap.org ) at 2016-07-13 15:22 EDT
Warning: Hostname google.com resolves to 6 IPs. Using 64.233.185.102.
Initiating ARP Ping Scan at 15:22
Scanning google.com (64.233.185.102) [1 port]
SENT (0.0510s) ARP who-has 64.233.185.102 tell 127.0.0.1
SENT (0.2520s) ARP who-has 64.233.185.102 tell 127.0.0.1
Completed ARP Ping Scan at 15:22, 0.43s elapsed (1 total hosts)
Nmap scan report for google.com (64.233.185.102) [host down]
Other addresses for google.com (not scanned): 64.233.185.113 64.233.185.100 64.233.185.139 64.233.185.138 64.233.185.101
Read data files from: /usr/share/nmap
Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn
Nmap done: 1 IP address (0 hosts up) scanned in 0.47 seconds
Raw packets sent: 2 (56B) | Rcvd: 0 (0B)

# ping ianfette.org -c2
PING ianfette.org (173.201.140.128) 56(84) bytes of data.
64 bytes from p3nlhg53c096.shr.prod.phx3.secureserver.net (173.201.140.128): icmp_seq=1 ttl=54 time=52.7 ms
64 bytes from p3nlhg53c096.shr.prod.phx3.secureserver.net (173.201.140.128): icmp_seq=2 ttl=54 time=52.6 ms
Please which commands should i do to discover cause?
 
Old 07-13-2016, 03:34 PM   #2
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,458

Rep: Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931
Quote:
Originally Posted by postcd View Post
Hello, nmap on Linux CentOS always report "Host seems down." Please which commands should i do to discover cause?
No idea, because you *STILL* provide next to no useful information when asking a question, despite being asked to repeatedly. You don't say what version/distro of Linux, what environment this is running in, etc.

There could be a thousand different things, depending on the environment, like firewalls, routers/switches, WAN interfaces, etc., that you've not said anything about. Since you can ping it, then (as the message TELLS YOU), the scan is being blocked. Whether that's by the remote server, firewall, selinux, iptables, router/switch we can't tell you. Ask your system administrator and your network administrator...they will be able to help.

You can read the man pages/docs on nmap. It is different by default, ping is ICMP, and nmap ping sends a syn package: try using the -PE, -PM, -PP flags to make it do an ICMP ping. Are you running this as root?

Last edited by TB0ne; 07-13-2016 at 03:37 PM.
 
Old 07-14-2016, 01:38 AM   #3
postcd
Member
 
Registered: Oct 2013
Posts: 527

Original Poster
Rep: Reputation: Disabled
yes, if provided info. is not enough, let me know which additional commands i should execute.
 
Old 07-14-2016, 08:10 AM   #4
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,458

Rep: Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931
Quote:
Originally Posted by postcd View Post
yes, if provided info. is not enough, let me know which additional commands i should execute.
Again, you are missing the point. YOU need to provide the missing information. You STILL aren't answering the questions you were just asked, and you were handed something to try. Your response was to ask for yet MORE commands.

Try again.
 
Old 07-14-2016, 02:01 PM   #5
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
Quote:
Originally Posted by postcd View Post
yes, if provided info. is not enough, let me know which additional commands i should execute.
Code:
nmap ianfette.org -Pn
You know where it said to "try -Pn" ?
Just a wild guess.
 
2 members found this post helpful.
Old 07-19-2016, 11:41 AM   #6
postcd
Member
 
Registered: Oct 2013
Posts: 527

Original Poster
Rep: Reputation: Disabled
Ofcourse, i already tried -Pn but it says host is down while im sure it is up (can see ianfette.org webpage from my home computer), but from remote linux server it says down:
Quote:
# nmap ianfette.org -Pn -vv

Starting Nmap 5.51 ( http://nmap.org ) at 2016-07-19 11:38 EDT
Initiating ARP Ping Scan at 11:38
Scanning ianfette.org (173.201.140.128) [1 port]
Completed ARP Ping Scan at 11:38, 0.43s elapsed (1 total hosts)
Nmap scan report for ianfette.org (173.201.140.128) [host down]
Read data files from: /usr/share/nmap
Nmap done: 1 IP address (0 hosts up) scanned in 0.51 seconds
Raw packets sent: 2 (56B) | Rcvd: 0 (0B)
Please idea why down and how to fix? Thank you
 
Old 07-19-2016, 12:27 PM   #7
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,458

Rep: Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931
Quote:
Originally Posted by postcd View Post
Ofcourse, i already tried -Pn but it says host is down while im sure it is up (can see ianfette.org webpage from my home computer), but from remote linux server it says down:


Please idea why down and how to fix? Thank you
Yes, you were spoon-fed an answer in post #2...did you not read or understand it?
 
Old 07-19-2016, 12:28 PM   #8
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,458

Rep: Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931Reputation: 7931
Quote:
Originally Posted by Habitual View Post
Code:
nmap ianfette.org -Pn
You know where it said to "try -Pn" ?
Just a wild guess.
Good luck...I gave him the flags for nmap to use ICMP, and he's still asking...have also asked him for information, which is STILL missing. See any of the OP's other threads where such behavior is exhibited.
 
Old 07-19-2016, 01:00 PM   #9
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
Quote:
Originally Posted by postcd View Post
Please idea why down and how to fix? Thank you
Fix? What "fix". 100 push ups, that's the fix.
Use another tool, like netcat (nc)

If you know the webpage is up, why not just nmap port 80 ?

ianfette.org / 173.201.140.128 / godaddy.com Address Space.
Maybe GoDaddy don't want you scanning 1000 ports unnecessarily on their IP?

See what UDP says:
Code:
sudo nmap 173.201.140.128 -sU -Pn -p 80
or use:
Code:
netcat -z -v ianfette.org 80
Connection to ianfette.org 80 port [tcp/http] succeeded!
Get you some!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
nmap -sP x.x.x.x show host up, but mtr --report x.x.x.x provide no results. Why? ShevyRoots CentOS 4 08-22-2014 11:55 AM
[SOLVED] The "report" and "quote" buttons are too close together. dugan LQ Suggestions & Feedback 5 03-04-2014 04:44 PM
Why does NMAP report â??Host seems downâ?ť despite host responding to ping? android-eve Linux - Networking 5 11-21-2011 03:35 PM
host only networking for "Crunchbang host" "Arch Linux guest" ted9411 Linux - Virtualization and Cloud 3 06-06-2011 09:29 AM
[SOLVED] Nmap - install required lib "http" and "shortport" dc_eros Slackware 1 10-07-2010 10:26 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 04:53 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration