RE: ssl-enum-ciphers not returning all ciphers
<[email protected]> Tue, 25 Jun 2019 19:13:43 +0000
| Newsgroups | gmane.comp.security.nmap.devel |
|---|---|
| Message-ID | <[email protected]> |
--===============2371198168858329930== Content-Language: en-US Content-Type: multipart/related; boundary="_004_8496C6137E83C2449BE229827F07E3FBAE4127ch00sem32mtmtnet_"; type="multipart/alternative" --_004_8496C6137E83C2449BE229827F07E3FBAE4127ch00sem32mtmtnet_ Content-Type: multipart/alternative; boundary="_000_8496C6137E83C2449BE229827F07E3FBAE4127ch00sem32mtmtnet_" --_000_8496C6137E83C2449BE229827F07E3FBAE4127ch00sem32mtmtnet_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable I actually see this pushing only the first two (RSA-only, non-ephemeral, no= n-Diffie-Hellman ---- follow highlights). But that's not really the issue = being questioned. Can you confirm, is there a different result if you were to use "openssl s_= client -connect 10.7.110.234:5671 -cipher DHE-RSA-AES256-GCM-SHA384"??? If by running an example that we are not seeing in NMAP, we get an incomple= te handshake, it's likely that NMAP is accurate in its result. Regards, Matt From: dev <[email protected]> On Behalf Of Lemons, Terry Sent: Tuesday, June 25, 2019 2:47 PM To: [email protected] Subject: ssl-enum-ciphers not returning all ciphers Hi I'm using nmap 7.70 on a Linux system to probe a different Linux system tha= t is using RabbitMQ/Erlang. The cipher list, specified in the RabbitMQ-specific format, is: ssl_options.ciphers.1 =3D AES128-GCM-SHA256 ssl_options.ciphers.2 =3D AES256-GCM-SHA384 ssl_options.ciphers.3 =3D DHE-RSA-AES256-GCM-SHA384 ssl_options.ciphers.4 =3D DHE-RSA-AES128-GCM-SHA256 ssl_options.ciphers.5 =3D DHE-RSA-AES256-SHA256 ssl_options.ciphers.6 =3D DHE-RSA-AES128-SHA256 ssl_options.ciphers.7 =3D DHE-RSA-AES256-SHA ssl_options.ciphers.8 =3D DHE-RSA-AES128-SHA ssl_options.ciphers.9 =3D ECDHE-RSA-AES128-GCM-SHA256 ssl_options.ciphers.10 =3D ECDHE-RSA-AES256-SHA384 ssl_options.ciphers.11 =3D ECDHE-RSA-AES128-GCM-SHA256 ssl_options.ciphers.12 =3D ECDHE-RSA-AES128-SHA256 ssl_options.ciphers.13 =3D ECDHE-RSA-AES256-SHA ssl_options.ciphers.14 =3D ECDHE-RSA-AES128-SHA When I run nmap (with -d option, below), it returns only the third and four= th cipher: nmap -sV -p 5671 -d --script ssl-enum-ciphers 10.7.110.234 Starting Nmap 7.70 ( https://nmap.org ) at 2019-06-25 12:36 MDT --------------- Timing report --------------- hostgroups: min 1, max 100000 rtt-timeouts: init 1000, min 100, max 10000 max-scan-delay: TCP 1000, UDP 1000, SCTP 1000 parallelism: min 0, max 0 max-retries: 10, host-timeout: 0 min-rate: 0, max-rate: 0 --------------------------------------------- NSE: Using Lua 5.3. NSE: Arguments from CLI: NSE: Loaded 44 scripts for scanning. NSE: Script Pre-scanning. NSE: Starting runlevel 1 (of 2) scan. Initiating NSE at 12:36 Completed NSE at 12:36, 0.00s elapsed NSE: Starting runlevel 2 (of 2) scan. Initiating NSE at 12:36 Completed NSE at 12:36, 0.00s elapsed Initiating Ping Scan at 12:36 Scanning 10.7.110.234 [4 ports] Packet capture filter (device eth0): dst host 10.7.93.141 and (icmp or icmp= 6 or ((tcp or udp or sctp) and (src host 10.7.110.234))) We got a ping packet back from 10.7.110.234: id =3D 48554 seq =3D 0 checksu= m =3D 16981 Completed Ping Scan at 12:36, 0.00s elapsed (1 total hosts) Overall sending rates: 1114.21 packets / s, 42339.83 bytes / s. mass_rdns: Using DNS server 10.7.93.100 Initiating Parallel DNS resolution of 1 host. at 12:36 mass_rdns: 13.00s 0/1 [#: 1, OK: 0, NX: 0, DR: 0, SF: 0, TR: 3] Completed Parallel DNS resolution of 1 host. at 12:37, 13.00s elapsed DNS resolution of 1 IPs took 13.00s. Mode: Async [#: 1, OK: 0, NX: 0, DR: 1= , SF: 0, TR: 3, CN: 0] Initiating SYN Stealth Scan at 12:37 Scanning 10.7.110.234 [1 port] Packet capture filter (device eth0): dst host 10.7.93.141 and (icmp or icmp= 6 or ((tcp or udp or sctp) and (src host 10.7.110.234))) Discovered open port 5671/tcp on 10.7.110.234 Completed SYN Stealth Scan at 12:37, 0.00s elapsed (1 total ports) Overall sending rates: 354.99 packets / s, 15619.45 bytes / s. Initiating Service scan at 12:37 Scanning 1 service on 10.7.110.234 Got nsock CONNECT response with status ERROR - aborting this service Completed Service scan at 12:37, 5.05s elapsed (1 service on 1 host) NSE: Script scanning 10.7.110.234. NSE: Starting runlevel 1 (of 2) scan. Initiating NSE at 12:37 NSE: Starting ssl-enum-ciphers against 10.7.110.234:5671. NSE: [ssl-enum-ciphers 10.7.110.234:5671] Trying protocol TLSv1.1. NSE: [ssl-enum-ciphers 10.7.110.234:5671] Trying protocol SSLv3. NSE: [ssl-enum-ciphers 10.7.110.234:5671] Trying protocol TLSv1.2. NSE: [ssl-enum-ciphers 10.7.110.234:5671] Trying protocol TLSv1.0. NSE: Finished ssl-enum-ciphers against 10.7.110.234:5671. NSE: Finished ssl-enum-ciphers against 10.7.110.234:5671. NSE: Finished ssl-enum-ciphers against 10.7.110.234:5671. NSE: [ssl-enum-ciphers 10.7.110.234:5671] (TLSv1.2) Comparing TLS_RSA_WITH_= AES_128_GCM_SHA256 to TLS_RSA_WITH_AES_256_GCM_SHA384 NSE: Finished ssl-enum-ciphers against 10.7.110.234:5671. NSE: Finished ssl-enum-ciphers against 10.7.110.234:5671. Completed NSE at 12:37, 0.07s elapsed NSE: Starting runlevel 2 (of 2) scan. Initiating NSE at 12:37 NSE: Starting rpc-grind against 10.7.110.234:5671. NSE: [rpc-grind 10.7.110.234:5671] isRPC didn't receive response. NSE: [rpc-grind 10.7.110.234:5671] Target port 5671 is not a RPC port. NSE: Finished rpc-grind against 10.7.110.234:5671. Completed NSE at 12:37, 0.01s elapsed Nmap scan report for 10.7.110.234 Host is up, received echo-reply ttl 62 (0.0013s latency). Scanned at 2019-06-25 12:36:49 MDT for 18s PORT STATE SERVICE REASON VERSION 5671/tcp open ssl/amqps? syn-ack ttl 62 | ssl-enum-ciphers: | TLSv1.2: | ciphers: | TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A | TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A | compressors: | NULL | cipher preference: client |_ least strength: A Final times for host: srtt: 1292 rttvar: 3833 to: 100000 NSE: Script Post-scanning. NSE: Starting runlevel 1 (of 2) scan. Initiating NSE at 12:37 Completed NSE at 12:37, 0.00s elapsed NSE: Starting runlevel 2 (of 2) scan. Initiating NSE at 12:37 Completed NSE at 12:37, 0.00s elapsed Read from /usr/bin/../share/nmap: nmap-payloads nmap-service-probes nmap-se= rvices. Service detection performed. Please report any incorrect results at https:/= /nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 18.80 seconds Raw packets sent: 5 (196B) | Rcvd: 2 (72B) # Is this a known problem? Should I be running nmap with different options? = I tried '-T1' but it didn't change the behavior. Thanks! tl Terry Lemons [DellEMC_Logo_Hz_Blue_rgb_10percent] Data Protection Division 176 South Street, MS 2/B-34 Hopkinton MA 01748 [email protected]<mailto:[email protected]> --_000_8496C6137E83C2449BE229827F07E3FBAE4127ch00sem32mtmtnet_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)"> <!--[if !mso]><style>v\:* {behavior:url(#default#VML);} o\:* {behavior:url(#default#VML);} w\:* {behavior:url(#default#VML);} .shape {behavior:url(#default#VML);} </style><![endif]--><style><!-- /* Font Definitions */ @font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4;} @font-face {font-family:"Yu Gothic"; panose-1:2 11 4 0 0 0 0 0 0 0;} @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;} @font-face {font-family:"\@Yu Gothic"; panose-1:2 11 4 0 0 0 0 0 0 0;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0in; margin-bottom:.0001pt; font-size:11.0pt; font-family:"Calibri",sans-serif;} a:link, span.MsoHyperlink {mso-style-priority:99; color:#0563C1; text-decoration:underline;} a:visited, span.MsoHyperlinkFollowed {mso-style-priority:99; color:#954F72; text-decoration:underline;} p.msonormal0, li.msonormal0, div.msonormal0 {mso-style-name:msonormal; mso-margin-top-alt:auto; margin-right:0in; mso-margin-bottom-alt:auto; margin-left:0in; font-size:12.0pt; font-family:"Times New Roman",serif;} span.EmailStyle18 {mso-style-type:personal; font-family:"Calibri",sans-serif; color:#2E74B5; font-weight:normal; font-style:normal; text-decoration:none none;} span.EmailStyle19 {mso-style-type:personal-reply; font-family:"Calibri",sans-serif; color:#1F497D;} .MsoChpDefault {mso-style-type:export-only; font-size:10.0pt;} @page WordSection1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in;} div.WordSection1 {page:WordSection1;} --></style><!--[if gte mso 9]><xml> <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" /> </xml><![endif]--><!--[if gte mso 9]><xml> <o:shapelayout v:ext=3D"edit"> <o:idmap v:ext=3D"edit" data=3D"1" /> </o:shapelayout></xml><![endif]--> </head> <body lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72"> <div class=3D"WordSection1"> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">I actually see this pu= shing only the first two (RSA-only, non-ephemeral, non-Diffie-Hellman ---- = follow highlights). But that’s not really the issue being quest= ioned.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">Can you confirm, is th= ere a different result if you were to use “openssl s_client –co= nnect </span><span style=3D"color:#2E74B5">10.7.110.234:5671 –cipher DHE-RS= A-AES256-GCM-SHA384”</span><span style=3D"color:#1F497D">???<o:p></o:= p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">If by running an examp= le that we are not seeing in NMAP, we get an incomplete handshake, it’= ;s likely that NMAP is accurate in its result.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">Regards,<o:p></o:p></s= pan></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">Matt<o:p></o:p></span>= </p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <div> <div style=3D"border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in = 0in 0in"> <p class=3D"MsoNormal"><b>From:</b> dev <[email protected]> <b>On = Behalf Of </b> Lemons, Terry<br> <b>Sent:</b> Tuesday, June 25, 2019 2:47 PM<br> <b>To:</b> [email protected]<br> <b>Subject:</b> ssl-enum-ciphers not returning all ciphers<o:p></o:p></p> </div> </div> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Hi<o:p></o:p></span></= p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">I’m using nmap 7= .70 on a Linux system to probe a different Linux system that is using Rabbi= tMQ/Erlang. <o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">The cipher list, speci= fied in the RabbitMQ-specific format, is:<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.1 = =3D <span style=3D"background:yellow;mso-highlight:yellow"> AES128-GCM-SHA256</span><o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.2 = =3D <span style=3D"background:yellow;mso-highlight:yellow"> AES256-GCM-SHA384</span><o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.3 = =3D DHE-RSA-AES256-GCM-SHA384<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.4 = =3D DHE-RSA-AES128-GCM-SHA256<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.5 = =3D DHE-RSA-AES256-SHA256<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.6 = =3D DHE-RSA-AES128-SHA256<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.7 = =3D DHE-RSA-AES256-SHA<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.8 = =3D DHE-RSA-AES128-SHA<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.9 = =3D ECDHE-RSA-AES128-GCM-SHA256<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.10= =3D ECDHE-RSA-AES256-SHA384<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.11= =3D ECDHE-RSA-AES128-GCM-SHA256<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.12= =3D ECDHE-RSA-AES128-SHA256<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.13= =3D ECDHE-RSA-AES256-SHA<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.14= =3D ECDHE-RSA-AES128-SHA<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">When I run nmap (with = -d option, below), it returns only the third and fourth cipher:<o:p></o:p><= /span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">nmap -sV -p 5671 -d --= script ssl-enum-ciphers 10.7.110.234<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Starting Nmap 7.70 ( <= a href=3D"https://nmap.org"> https://nmap.org</a> ) at 2019-06-25 12:36 MDT<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">--------------- Timing= report ---------------<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5"> hostgroups: min= 1, max 100000<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5"> rtt-timeouts: i= nit 1000, min 100, max 10000<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5"> max-scan-delay:= TCP 1000, UDP 1000, SCTP 1000<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5"> parallelism: mi= n 0, max 0<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5"> max-retries: 10= , host-timeout: 0<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5"> min-rate: 0, ma= x-rate: 0<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">----------------------= -----------------------<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Using Lua 5.3.<o:= p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Arguments from CL= I:<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Loaded 44 scripts= for scanning.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Script Pre-scanni= ng.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Starting runlevel= 1 (of 2) scan.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Initiating NSE at 12:3= 6<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Completed NSE at 12:36= , 0.00s elapsed<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Starting runlevel= 2 (of 2) scan.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Initiating NSE at 12:3= 6<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Completed NSE at 12:36= , 0.00s elapsed<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Initiating Ping Scan a= t 12:36<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Scanning 10.7.110.234 = [4 ports]<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Packet capture filter = (device eth0): dst host 10.7.93.141 and (icmp or icmp6 or ((tcp or udp or s= ctp) and (src host 10.7.110.234)))<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">We got a ping packet b= ack from 10.7.110.234: id =3D 48554 seq =3D 0 checksum =3D 16981<o:p></o:p>= </span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Completed Ping Scan at= 12:36, 0.00s elapsed (1 total hosts)<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Overall sending rates:= 1114.21 packets / s, 42339.83 bytes / s.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">mass_rdns: Using DNS s= erver 10.7.93.100<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Initiating Parallel DN= S resolution of 1 host. at 12:36<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">mass_rdns: 13.00s 0/1 = [#: 1, OK: 0, NX: 0, DR: 0, SF: 0, TR: 3]<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Completed Parallel DNS= resolution of 1 host. at 12:37, 13.00s elapsed<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">DNS resolution of 1 IP= s took 13.00s. Mode: Async [#: 1, OK: 0, NX: 0, DR: 1, SF: 0, TR: 3, CN: 0]= <o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Initiating SYN Stealth= Scan at 12:37<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Scanning 10.7.110.234 = [1 port]<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Packet capture filter = (device eth0): dst host 10.7.93.141 and (icmp or icmp6 or ((tcp or udp or s= ctp) and (src host 10.7.110.234)))<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Discovered open port 5= 671/tcp on 10.7.110.234<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Completed SYN Stealth = Scan at 12:37, 0.00s elapsed (1 total ports)<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Overall sending rates:= 354.99 packets / s, 15619.45 bytes / s.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Initiating Service sca= n at 12:37<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Scanning 1 service on = 10.7.110.234<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Got nsock CONNECT resp= onse with status ERROR - aborting this service<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Completed Service scan= at 12:37, 5.05s elapsed (1 service on 1 host)<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Script scanning 1= 0.7.110.234.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Starting runlevel= 1 (of 2) scan.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Initiating NSE at 12:3= 7<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Starting ssl-enum= -ciphers against 10.7.110.234:5671.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: [ssl-enum-ciphers= 10.7.110.234:5671] Trying protocol TLSv1.1.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: [ssl-enum-ciphers= 10.7.110.234:5671] Trying protocol SSLv3.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: [ssl-enum-ciphers= 10.7.110.234:5671] Trying protocol TLSv1.2.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: [ssl-enum-ciphers= 10.7.110.234:5671] Trying protocol TLSv1.0.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Finished ssl-enum= -ciphers against 10.7.110.234:5671.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Finished ssl-enum= -ciphers against 10.7.110.234:5671.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Finished ssl-enum= -ciphers against 10.7.110.234:5671.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: [ssl-enum-ciphers= 10.7.110.234:5671] (TLSv1.2) Comparing TLS_RSA_WITH_AES_128_GCM_SHA256 to = TLS_RSA_WITH_AES_256_GCM_SHA384<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Finished ssl-enum= -ciphers against 10.7.110.234:5671.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Finished ssl-enum= -ciphers against 10.7.110.234:5671.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Completed NSE at 12:37= , 0.07s elapsed<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Starting runlevel= 2 (of 2) scan.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Initiating NSE at 12:3= 7<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Starting rpc-grin= d against 10.7.110.234:5671.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: [rpc-grind 10.7.1= 10.234:5671] isRPC didn't receive response.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: [rpc-grind 10.7.1= 10.234:5671] Target port 5671 is not a RPC port.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Finished rpc-grin= d against 10.7.110.234:5671.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Completed NSE at 12:37= , 0.01s elapsed<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Nmap scan report for 1= 0.7.110.234<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Host is up, received e= cho-reply ttl 62 (0.0013s latency).<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Scanned at 2019-06-25 = 12:36:49 MDT for 18s<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">PORT = STATE SERVICE REASON = VERSION<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">5671/tcp open ss= l/amqps? syn-ack ttl 62<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">| ssl-enum-ciphers:<o:= p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">| TLSv1.2:= <o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">| &nb= sp; ciphers:<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">| &nb= sp; TLS_<span style=3D"background:yellow;mso-highlight:yellow">= RSA</span>_WITH_<span style=3D"background:yellow;mso-highlight:yellow">AES_= 128_GCM_SHA256 </span>(rsa 2048) - A<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">| &nb= sp; TLS_<span style=3D"background:yellow;mso-highlight:yellow">= RSA</span>_WITH_<span style=3D"background:yellow;mso-highlight:yellow">AES_= 256_GCM_SHA384 </span>(rsa 2048) - A<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">| &nb= sp; compressors:<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">| &nb= sp; NULL<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">| &nb= sp; cipher preference: client<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">|_ least strengt= h: A<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Final times for host: = srtt: 1292 rttvar: 3833 to: 100000<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Script Post-scann= ing.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Starting runlevel= 1 (of 2) scan.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Initiating NSE at 12:3= 7<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Completed NSE at 12:37= , 0.00s elapsed<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Starting runlevel= 2 (of 2) scan.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Initiating NSE at 12:3= 7<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Completed NSE at 12:37= , 0.00s elapsed<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Read from /usr/bin/../= share/nmap: nmap-payloads nmap-service-probes nmap-services.<o:p></o:p></sp= an></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Service detection perf= ormed. Please report any incorrect results at <a href=3D"https://nmap.org/submit/">https://nmap.org/submit/</a> .<o:p></o= :p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Nmap done: 1 IP addres= s (1 host up) scanned in 18.80 seconds<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5"> &nbs= p; Raw packets sent: 5 (196B) | Rcvd: 2= (72B)<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">#<o:p></o:p></span></p= > <p class=3D"MsoNormal"><span style=3D"color:#2E74B5"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Is this a known proble= m? Should I be running nmap with different options? I tried ‘-T= 1’ but it didn’t change the behavior.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Thanks!<o:p></o:p></sp= an></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5">tl<o:p></o:p></span></= p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#2E74B5"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:"= ;Arial",sans-serif;color:#215868">Terry Lemons<o:p></o:p></span></b></= p> <p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:"= ;Arial",sans-serif;color:#215868"><o:p> </o:p></span></b></p> <p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Ar= ial",sans-serif;color:#215868"><img border=3D"0" width=3D"80" height= =3D"14" style=3D"width:.8333in;height:.1458in" id=3D"Picture_x0020_1" src= =3D"cid:[email protected]" alt=3D"DellEMC_Logo_Hz_Blue_rgb_10p= ercent"><o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Ar= ial",sans-serif;color:#215868">Data Protection Division<o:p></o:p></sp= an></p> <p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Ar= ial",sans-serif;color:#215868"><o:p> </o:p></span></p> <p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Ar= ial",sans-serif;color:#215868">176 South Street, MS 2/B-34<br> Hopkinton MA 01748<br> </span><span style=3D"color:#1F497D"><a href=3D"mailto:[email protected]= m"><span style=3D"color:blue">[email protected]</span></a><o:p></o:p></= span></p> <p class=3D"MsoNormal"><o:p> </o:p></p> </div> </body> </html> --_000_8496C6137E83C2449BE229827F07E3FBAE4127ch00sem32mtmtnet_-- --_004_8496C6137E83C2449BE229827F07E3FBAE4127ch00sem32mtmtnet_ Content-Type: image/png; name="image001.png" Content-Description: image001.png Content-Disposition: inline; filename="image001.png"; size=2117; creation-date="Tue, 25 Jun 2019 19:13:43 GMT"; modification-date="Tue, 25 Jun 2019 19:13:43 GMT" Content-ID: <[email protected]> Content-Transfer-Encoding: base64 iVBORw0KGgoAAAANSUhEUgAAAFAAAAAOCAYAAAC4lZsqAAAAAXNSR0IArs4c6QAAAAlwSFlzAAAO xAAADsQBlSsOGwAAABl0RVh0U29mdHdhcmUATWljcm9zb2Z0IE9mZmljZX/tNXEAAAfFSURBVFhH rVgJUJVVFP6AxwMUkH1RQFlLcSkUxcSy1RZbnLTMtIncclILtEHHprSpJicnW8apHFomx8hKJbPF IrO0LFOgEgVEQEEWQRBBHryF13fue4/e4z2Wqc7Mz/z/u+fee+53zvnOuWjq2/VmOIgZHm5uCBni 6fhzP1/PHahEMPVXpUU5aRm7zWjWGWE2m+GlcUeAt8ZJx6B0DAAt8fH0gL+XR5+7dZm60XTFAJ2p l9kyg3uI3bKH7Huxw4CwoVrwOANKQ7segT6e0Ho4K9e2daGiWQdujZgAb8QGevesp4l+86gjfLSL 50SCrxazEoOROS1KGeFKzrV2YXFeCb4rvQgQgMpLndhye4KDakVLJ67NKYCeh757bCh2P5DstFRh XRumvVcE6LuxdMoIbJ2V2OeB3y2ox7PfnkFChK+TjpmOWjk9BgsmhKOIa6ZtPYY1N8Xi5Vti+wVw 85EarN1dgn1LU3B7YlCPbjlBy/yqHHWXuxBD0Dzc3VDV3AlfrTveoI3jwn2hMRgJq4AuHu00qsny 9wTBOXG+Dbl/NSD3wWRMjfJ3MGJ/eTMWf16KGm4i82deG4llk4YrnQsEK2yoJYIZFFy2G9189EYX UUOdbppgFDv4GOSjH7nASEmPDUTe/LH96nXxPCZGwrbCOmSnRyPQReTLAgaG1dvHamFi5Mm7TUoa r2A6nfoEz5Q1d0xPVshZXv+lGjPe/wPFK1KhAVEVwxODfLCR3hO5rDdh56lG/FDegrME8t6PTqBg 2UREDfNS4y//dBbrDlSpeXQL1nHeS7fGqbFnmc7b6NH1t8RhycRIGWZEu0HPRzzoSlSKyRgf9wHy TcY9+1jHfm05aFq0P9ypu40AZadbztZbtv95Af5aD0xl5HUYLAB20+vzdp3C46nDsYERbC/edEr2 9SNxhMG1Zv8ZAihCb0UwYh5i6NtkGSev2FeGrUdr0cjU3PTzOWycMQrLvijDZ382UI086a/FW3cn Yc6YUMVhGXtKsLe4Ua23Pr8C910VrHhlMBzk8nR9/Og6jh2VSYHwYlStnhaNJ785g9XXRStH9pY3 f6vBCtLGpycaFXAiByovoZFZtIHn7UteILD5zEILgCoInc16ZWYC8hiF51s7seNkE/Zz4dP17Srq xLvb7x+NBEbu4XOtyCCHlDPspRCkJwXhg/uuRjQJd8+pJhjFs4Mg8sGAKGZqJawHIa2dJtyVFIys byuQRzvmJIc6zDpY1cpCY8TC8eHIOV7fM/YlgUklZfWVMaI4NnyoepxLot0WPp7umBHjjx2FHWgh P7bQK5Jm88aFI3fOaKX5OtP16e8qYOgyccwdT02NwpY7LYXkVXLF2vxKmMTz/1MYSoU+VNWC5V+W KX61ibxL97BhxkiEsQCKGPmjpPwKZtPmI9VOAL7CrHpwXJhyiD3/NV7WI9Gu0vbnq34BtEy0Cx15 JQf8caEdeSVN+Jqe2vbreVUp/Fmpt96VqCpgG8FcsrcUO4voVbYlqqz/T2LiXtKmpLIKCwX/A6AF LOEom9gsX5QSiZcOVeNYbRsmDfdTw+UtOvzO75x7rvpPlvULoI4W/sj0FACkigXxOdPQjlNNOszO LbZsTAJOi/TFO/ckYTzLekFdOxbuOomTtZLqbogL9kE924sO+3D5DyZfYaszLsIPj020VPzBiC9t nDsmBJsOV+PTB8aoKZI500cGINLPuUUL5W+n2X4NRiwAqt7PmaSyWWVUm0Ig56eGqCKydG8ZdksR sTbaIUzzneztYlihc47XYdXX5dBJO8T1Vl4XheWTRmDy+0UsbYL1AERIO7wH4DcxU2/XbgzmkKKT SVum5hSq5tqXNLCbnJg3z3UrdCcrcgb7WxMJty8e/KnqklrDAiAPVk9+y1XVFbhC0t95shH5p5vV dwiLQTarmdw2ds1LxouMuGfYrgivNTGyZn9SjLGhQ/Ahm1ypwN6M1NfuiFd9oTTbXZJrGjahfLft YXGcWa05jJVaMQWdUdzU4ajDQwSR02Ym/NPg/pt6FB/og8kj/PBBUYOKuuhh3kjltyu5OTYAIbRp 449n8fyNo1zqvHjonCqgGtZuBeBpRtr8j61paTclmimYywiTDW2y/oaRSCGXLPm8hBW6S6VtQfVl FalJBPfD2VdjirXx1tEZwltCA8fYOznswbFEFqnt1JcIFQDzK1uQT37tEfJpUnwASq0ASqshxWEg kWP17izWshdcwFZLZMtt8Q5LiK6tjREu3cEO4/r3CuHBvbI4z480ICJXyc0Er5D8KTqantRlhFBL pbOEbTzfZzGUs9g/hVurmv2Od3Ds8OIULNpTigNlvMpx+lwWkLfIhcESUVaR4uvF6mwwEyFPfmjt OIcAhrD/FNrXSHqLshQdq7FqCa3J4V4u18pDLF5TmI5OQupYyVvHgmsi1DL2BUV002OGqbPIXXr2 6BCH6UPoPA3ttEly2FAcWZKCLF7lbny3EKOsVzm5E/ty8YMZ1yi7NDWrJjvZ4caD2K5i/Xl6FFP7 +4wJeIZNs6RiJsHuLXHcuHJlap/LyK3Cz0uDmsw01zp0qKc41yqLUiJwLxt0nSselH8mWO/t02MC kP/oBKc1Dz4ywZIRveSrh8fDmyDaS1LwEOxbOB7neReWe7Fwopw5jqlrk78BL+gFrBZ4pbYAAAAA SUVORK5CYII= --_004_8496C6137E83C2449BE229827F07E3FBAE4127ch00sem32mtmtnet_-- --===============2371198168858329930== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Sent through the dev mailing list https://nmap.org/mailman/listinfo/dev Archived at http://seclists.org/nmap-dev/ --===============2371198168858329930==--