LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 05-23-2013, 07:45 AM   #1
AWSmith
Member
 
Registered: Jun 2012
Posts: 32

Rep: Reputation: Disabled
Weird nmap behaviour as root vs user


Can anyone explain this? Nmap, when run with -n -sP as a non-privalged user results in correct output. But when run as root... it shows every node on the subnet as up.

huh?

[asmith@vnb01 ~]$ nmap -nsP 10.15.59.0/24

Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2013-05-23 08:36 EDT
Host 10.15.59.1 appears to be up.
Host 10.15.59.8 appears to be up.
Host 10.15.59.9 appears to be up.
Host 10.15.59.12 appears to be up.
Host 10.15.59.13 appears to be up.
Host 10.15.59.14 appears to be up.
Host 10.15.59.201 appears to be up.
Host 10.15.59.205 appears to be up.
Host 10.15.59.207 appears to be up.
Nmap finished: 256 IP addresses (9 hosts up) scanned in 4.369 seconds

[asmith@vnb01 ~]$ sudo nmap -nsP 10.15.59.0/24 | tail
Host 10.15.59.247 appears to be up.
Host 10.15.59.248 appears to be up.
Host 10.15.59.249 appears to be up.
Host 10.15.59.250 appears to be up.
Host 10.15.59.251 appears to be up.
Host 10.15.59.252 appears to be up.
Host 10.15.59.253 appears to be up.
Host 10.15.59.254 appears to be up.
Host 10.15.59.255 appears to be up.
Nmap finished: 256 IP addresses (256 hosts up) scanned in 1.836 seconds
[asmith@vnb01 ~]$
 
Old 05-23-2013, 11:57 AM   #2
Ygrex
Member
 
Registered: Nov 2004
Location: Russia (St.Petersburg)
Distribution: Debian
Posts: 666

Rep: Reputation: 68
most likely somebody replies to all ARP-requests (only privileged nmap sends them), you can check it with tcpdump if you want
 
Old 06-10-2013, 09:06 AM   #3
AWSmith
Member
 
Registered: Jun 2012
Posts: 32

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by Ygrex View Post
most likely somebody replies to all ARP-requests (only privileged nmap sends them), you can check it with tcpdump if you want
Sorry I didn't get back to this thread... but what an annoying behaviour! Ugh! I'm going to find it and figure out what it is ... when i have time... like in 3 years. 8(
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Weird behaviour jim.thornton Linux - Newbie 10 10-22-2012 09:30 PM
Weird nmap issues fakie_flip Linux - Networking 1 10-08-2012 01:48 AM
Weird directory user group (4294967295) - no access even with root bazeusz Linux - General 5 05-30-2011 11:41 AM
Weird LQ behaviour: Suddenly logged in as other user Hungry ghost LQ Suggestions & Feedback 3 07-21-2006 09:43 PM
Strange Nmap behaviour ? ? ? lub0 Linux - Security 7 10-07-2003 08:45 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 07:38 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration