RE: options -sn not just pinging

Interesting because the description says "Ping Scan" 
And it never reports responses from ports 443 and 80
"-sn: Ping Scan - disable port scan"
If it sends probes to 443 and 80 on purpose why does it not report them as being open in the output? What would be the use of that?

 
-----Original Message-----
From: David Fifield [mailto:[email protected]] 
Sent: Tuesday, April 18, 2017 5:20 PM
To: Christopher C Thornton <[email protected]>
Cc: [email protected]
Subject: Re: options -sn not just pinging

On Mon, Apr 17, 2017 at 09:17:55PM +0000, Christopher C Thornton wrote:
> When I run this scan
> 
> nmap -sn 192.168.9.0/25
> 
> nmap pings the address range (expected result ) but it also sends syn 
> packets to tcp port 443 on each of the IP’s And it sends ack packets 
> to port 80

-sn doesn't mean "ping scan"; it means "host discovery only." The default host discovery sends four probes:
	ICMP echo
	TCP SYN to port 443
	TCP ACK to port 80
	ICMP timestamp request
If you only want ICMP echo, do -sn -PE.

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/