RE: ssl-enum-ciphers not returning all ciphers
"Lemons, Terry" <[email protected]> Tue, 25 Jun 2019 19:27:43 +0000
| Newsgroups | gmane.comp.security.nmap.devel |
|---|---|
| Message-ID | <[email protected]> |
--===============9021378630650143166==
Content-Language: en-US
Content-Type: multipart/related;
boundary="_004_3D3D64550867DA40B2DA7D9F013709C0B3545FF0MX308CL03corpem_";
type="multipart/alternative"
--_004_3D3D64550867DA40B2DA7D9F013709C0B3545FF0MX308CL03corpem_
Content-Type: multipart/alternative;
boundary="_000_3D3D64550867DA40B2DA7D9F013709C0B3545FF0MX308CL03corpem_"
--_000_3D3D64550867DA40B2DA7D9F013709C0B3545FF0MX308CL03corpem_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Hi Matt
Thanks very much for the help!
Thanks for pointing out that I was wrong in identifying the two ciphers sho=
wn in nmap; that makes the results make more sense.
I ran the openssl command you suggested; stripping out some of the possibly=
-sensitive information; here is the output:
lava93141:/tmp # openssl s_client -connect 10.7.110.234:5671 -cipher DHE-RS=
A-AES256-GCM-SHA384
CONNECTED(00000003)
.
.
.
verify error:num=3D19:self signed certificate in certificate chain
139674829317776:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert han=
dshake failure:s3_pkt.c:1498:SSL alert number 40
139674829317776:error:140790E5:SSL routines:ssl23_write:ssl handshake failu=
re:s23_lib.c:177:
---
Certificate chain
.
.
.
---
Server certificate
-----BEGIN CERTIFICATE-----
.
.
.
-----END CERTIFICATE-----
subject=3D...
issuer=3D...
---
Acceptable client certificate CA names
.
.
.
Client Certificate Types: ECDSA sign, RSA sign, DSA sign
Requested Signature Algorithms: ECDSA+SHA512:RSA+SHA512:ECDSA+SHA384:RSA+SH=
A384:ECDSA+SHA256:RSA+SHA256:ECDSA+SHA224:RSA+SHA224:ECDSA+SHA1:RSA+SHA1:DS=
A+SHA1
Shared Requested Signature Algorithms: ECDSA+SHA512:RSA+SHA512:ECDSA+SHA384=
:RSA+SHA384:ECDSA+SHA256:RSA+SHA256:ECDSA+SHA224:RSA+SHA224:ECDSA+SHA1:RSA+=
SHA1:DSA+SHA1
Peer signing digest: SHA512
Server Temp Key: DH, 2048 bits
---
SSL handshake has read 3122 bytes and written 330 bytes
---
New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
Protocol : TLSv1.2
Cipher : DHE-RSA-AES256-GCM-SHA384
Session-ID: xxxxxx
Session-ID-ctx:
Master-Key: xxxxxxx
Key-Arg : None
PSK identity: None
PSK identity hint: None
SRP username: None
Start Time: 1561490298
Timeout : 300 (sec)
Verify return code: 19 (self signed certificate in certificate chain)
---
#
Thoughts?
Thanks
tl
From: [email protected] <[email protected]>
Sent: Tuesday, June 25, 2019 3:14 PM
To: Lemons, Terry; [email protected]
Subject: RE: ssl-enum-ciphers not returning all ciphers
[EXTERNAL EMAIL]
I actually see this pushing only the first two (RSA-only, non-ephemeral, no=
n-Diffie-Hellman ---- follow highlights). But that's not really the issue =
being questioned.
Can you confirm, is there a different result if you were to use "openssl s_=
client -connect 10.7.110.234:5671 -cipher DHE-RSA-AES256-GCM-SHA384"???
If by running an example that we are not seeing in NMAP, we get an incomple=
te handshake, it's likely that NMAP is accurate in its result.
Regards,
Matt
From: dev <[email protected]<mailto:[email protected]>> On Behalf Of =
Lemons, Terry
Sent: Tuesday, June 25, 2019 2:47 PM
To: [email protected]<mailto:[email protected]>
Subject: ssl-enum-ciphers not returning all ciphers
Hi
I'm using nmap 7.70 on a Linux system to probe a different Linux system tha=
t is using RabbitMQ/Erlang.
The cipher list, specified in the RabbitMQ-specific format, is:
ssl_options.ciphers.1 =3D AES128-GCM-SHA256
ssl_options.ciphers.2 =3D AES256-GCM-SHA384
ssl_options.ciphers.3 =3D DHE-RSA-AES256-GCM-SHA384
ssl_options.ciphers.4 =3D DHE-RSA-AES128-GCM-SHA256
ssl_options.ciphers.5 =3D DHE-RSA-AES256-SHA256
ssl_options.ciphers.6 =3D DHE-RSA-AES128-SHA256
ssl_options.ciphers.7 =3D DHE-RSA-AES256-SHA
ssl_options.ciphers.8 =3D DHE-RSA-AES128-SHA
ssl_options.ciphers.9 =3D ECDHE-RSA-AES128-GCM-SHA256
ssl_options.ciphers.10 =3D ECDHE-RSA-AES256-SHA384
ssl_options.ciphers.11 =3D ECDHE-RSA-AES128-GCM-SHA256
ssl_options.ciphers.12 =3D ECDHE-RSA-AES128-SHA256
ssl_options.ciphers.13 =3D ECDHE-RSA-AES256-SHA
ssl_options.ciphers.14 =3D ECDHE-RSA-AES128-SHA
When I run nmap (with -d option, below), it returns only the third and four=
th cipher:
nmap -sV -p 5671 -d --script ssl-enum-ciphers 10.7.110.234
Starting Nmap 7.70 ( https://nmap.org ) at 2019-06-25 12:36 MDT
--------------- Timing report ---------------
hostgroups: min 1, max 100000
rtt-timeouts: init 1000, min 100, max 10000
max-scan-delay: TCP 1000, UDP 1000, SCTP 1000
parallelism: min 0, max 0
max-retries: 10, host-timeout: 0
min-rate: 0, max-rate: 0
---------------------------------------------
NSE: Using Lua 5.3.
NSE: Arguments from CLI:
NSE: Loaded 44 scripts for scanning.
NSE: Script Pre-scanning.
NSE: Starting runlevel 1 (of 2) scan.
Initiating NSE at 12:36
Completed NSE at 12:36, 0.00s elapsed
NSE: Starting runlevel 2 (of 2) scan.
Initiating NSE at 12:36
Completed NSE at 12:36, 0.00s elapsed
Initiating Ping Scan at 12:36
Scanning 10.7.110.234 [4 ports]
Packet capture filter (device eth0): dst host 10.7.93.141 and (icmp or icmp=
6 or ((tcp or udp or sctp) and (src host 10.7.110.234)))
We got a ping packet back from 10.7.110.234: id =3D 48554 seq =3D 0 checksu=
m =3D 16981
Completed Ping Scan at 12:36, 0.00s elapsed (1 total hosts)
Overall sending rates: 1114.21 packets / s, 42339.83 bytes / s.
mass_rdns: Using DNS server 10.7.93.100
Initiating Parallel DNS resolution of 1 host. at 12:36
mass_rdns: 13.00s 0/1 [#: 1, OK: 0, NX: 0, DR: 0, SF: 0, TR: 3]
Completed Parallel DNS resolution of 1 host. at 12:37, 13.00s elapsed
DNS resolution of 1 IPs took 13.00s. Mode: Async [#: 1, OK: 0, NX: 0, DR: 1=
, SF: 0, TR: 3, CN: 0]
Initiating SYN Stealth Scan at 12:37
Scanning 10.7.110.234 [1 port]
Packet capture filter (device eth0): dst host 10.7.93.141 and (icmp or icmp=
6 or ((tcp or udp or sctp) and (src host 10.7.110.234)))
Discovered open port 5671/tcp on 10.7.110.234
Completed SYN Stealth Scan at 12:37, 0.00s elapsed (1 total ports)
Overall sending rates: 354.99 packets / s, 15619.45 bytes / s.
Initiating Service scan at 12:37
Scanning 1 service on 10.7.110.234
Got nsock CONNECT response with status ERROR - aborting this service
Completed Service scan at 12:37, 5.05s elapsed (1 service on 1 host)
NSE: Script scanning 10.7.110.234.
NSE: Starting runlevel 1 (of 2) scan.
Initiating NSE at 12:37
NSE: Starting ssl-enum-ciphers against 10.7.110.234:5671.
NSE: [ssl-enum-ciphers 10.7.110.234:5671] Trying protocol TLSv1.1.
NSE: [ssl-enum-ciphers 10.7.110.234:5671] Trying protocol SSLv3.
NSE: [ssl-enum-ciphers 10.7.110.234:5671] Trying protocol TLSv1.2.
NSE: [ssl-enum-ciphers 10.7.110.234:5671] Trying protocol TLSv1.0.
NSE: Finished ssl-enum-ciphers against 10.7.110.234:5671.
NSE: Finished ssl-enum-ciphers against 10.7.110.234:5671.
NSE: Finished ssl-enum-ciphers against 10.7.110.234:5671.
NSE: [ssl-enum-ciphers 10.7.110.234:5671] (TLSv1.2) Comparing TLS_RSA_WITH_=
AES_128_GCM_SHA256 to TLS_RSA_WITH_AES_256_GCM_SHA384
NSE: Finished ssl-enum-ciphers against 10.7.110.234:5671.
NSE: Finished ssl-enum-ciphers against 10.7.110.234:5671.
Completed NSE at 12:37, 0.07s elapsed
NSE: Starting runlevel 2 (of 2) scan.
Initiating NSE at 12:37
NSE: Starting rpc-grind against 10.7.110.234:5671.
NSE: [rpc-grind 10.7.110.234:5671] isRPC didn't receive response.
NSE: [rpc-grind 10.7.110.234:5671] Target port 5671 is not a RPC port.
NSE: Finished rpc-grind against 10.7.110.234:5671.
Completed NSE at 12:37, 0.01s elapsed
Nmap scan report for 10.7.110.234
Host is up, received echo-reply ttl 62 (0.0013s latency).
Scanned at 2019-06-25 12:36:49 MDT for 18s
PORT STATE SERVICE REASON VERSION
5671/tcp open ssl/amqps? syn-ack ttl 62
| ssl-enum-ciphers:
| TLSv1.2:
| ciphers:
| TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A
| TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A
| compressors:
| NULL
| cipher preference: client
|_ least strength: A
Final times for host: srtt: 1292 rttvar: 3833 to: 100000
NSE: Script Post-scanning.
NSE: Starting runlevel 1 (of 2) scan.
Initiating NSE at 12:37
Completed NSE at 12:37, 0.00s elapsed
NSE: Starting runlevel 2 (of 2) scan.
Initiating NSE at 12:37
Completed NSE at 12:37, 0.00s elapsed
Read from /usr/bin/../share/nmap: nmap-payloads nmap-service-probes nmap-se=
rvices.
Service detection performed. Please report any incorrect results at https:/=
/nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 18.80 seconds
Raw packets sent: 5 (196B) | Rcvd: 2 (72B)
#
Is this a known problem? Should I be running nmap with different options? =
I tried '-T1' but it didn't change the behavior.
Thanks!
tl
Terry Lemons
[DellEMC_Logo_Hz_Blue_rgb_10percent]
Data Protection Division
176 South Street, MS 2/B-34
Hopkinton MA 01748
[email protected]<mailto:[email protected]>
--_000_3D3D64550867DA40B2DA7D9F013709C0B3545FF0MX308CL03corpem_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#2E74B5;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">Hi Matt<o:p></o:p></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">Thanks very much for t=
he help!<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">Thanks for pointing ou=
t that I was wrong in identifying the two ciphers shown in nmap; that makes=
the results make more sense.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">I ran the openssl comm=
and you suggested; stripping out some of the possibly-sensitive information=
; here is the output:<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">lava93141:/tmp # opens=
sl s_client -connect 10.7.110.234:5671 -cipher DHE-RSA-AES256-GCM-SHA384<o:=
p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">CONNECTED(00000003)<o:=
p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">.<o:p></o:p></span></p=
>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">.<o:p></o:p></span></p=
>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">.<o:p></o:p></span></p=
>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">verify error:num=3D19:=
self signed certificate in certificate chain<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">139674829317776:error:=
14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:s3_pkt.=
c:1498:SSL alert number 40<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">139674829317776:error:=
140790E5:SSL routines:ssl23_write:ssl handshake failure:s23_lib.c:177:<o:p>=
</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">---<o:p></o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">Certificate chain<o:p>=
</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">.<o:p></o:p></span></p=
>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">.<o:p></o:p></span></p=
>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">.<o:p></o:p></span></p=
>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">---<o:p></o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">Server certificate<o:p=
></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">-----BEGIN CERTIFICATE=
-----<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">.<o:p></o:p></span></p=
>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">.<o:p></o:p></span></p=
>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">.<o:p></o:p></span></p=
>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">-----END CERTIFICATE--=
---<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">subject=3D…<o:p>=
</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">issuer=3D…<o:p><=
/o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">---<o:p></o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">Acceptable client cert=
ificate CA names<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">.<o:p></o:p></span></p=
>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">.<o:p></o:p></span></p=
>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">.<o:p></o:p></span></p=
>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">Client Certificate Typ=
es: ECDSA sign, RSA sign, DSA sign<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">Requested Signature Al=
gorithms: ECDSA+SHA512:RSA+SHA512:ECDSA+SHA384:RSA+SHA384:E=
CDSA+SHA256:RSA+SHA256:ECDSA+SHA224:RSA+SHA224:ECDSA+SH=
A1:RSA+SHA1:DSA+SHA1<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">Shared Requested Signa=
ture Algorithms: ECDSA+SHA512:RSA+SHA512:ECDSA+SHA384:RSA+S=
HA384:ECDSA+SHA256:RSA+SHA256:ECDSA+SHA224:RSA+SHA224:ECDSA=
+SHA1:RSA+SHA1:DSA+SHA1<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">Peer signing digest: S=
HA512<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">Server Temp Key: DH, 2=
048 bits<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">---<o:p></o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">SSL handshake has read=
3122 bytes and written 330 bytes<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">---<o:p></o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">New, TLSv1/SSLv3, Ciph=
er is DHE-RSA-AES256-GCM-SHA384<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">Server public key is 2=
048 bit<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">Secure Renegotiation I=
S supported<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">Compression: NONE<o:p>=
</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">Expansion: NONE<o:p></=
o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">No ALPN negotiated<o:p=
></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">SSL-Session:<o:p></o:p=
></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"> Pro=
tocol : TLSv1.2<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"> Cip=
her : DHE-RSA-AES256-GCM-SHA384<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"> Ses=
sion-ID: xxxxxx<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"> Ses=
sion-ID-ctx:<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"> Mas=
ter-Key: xxxxxxx<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"> Key=
-Arg : None<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"> PSK=
identity: None<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"> PSK=
identity hint: None<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"> SRP=
username: None<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"> Sta=
rt Time: 1561490298<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"> Tim=
eout : 300 (sec)<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"> Ver=
ify return code: 19 (self signed certificate in certificate chain)<o:p></o:=
p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">---<o:p></o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">#<o:p></o:p></span></p=
>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">Thoughts?<o:p></o:p></=
span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">Thanks<o:p></o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">tl<o:p></o:p></span></=
p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa=
n></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b>From:</b> [email protected] <Matthew.Snyde=
[email protected]> <br>
<b>Sent:</b> Tuesday, June 25, 2019 3:14 PM<br>
<b>To:</b> Lemons, Terry; [email protected]<br>
<b>Subject:</b> RE: ssl-enum-ciphers not returning all ciphers<o:p></o:p></=
p>
</div>
</div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<div>
<p><span style=3D"color:#CE1126">[EXTERNAL EMAIL] <o:p></o:p></span></p>
</div>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">I actually see this pu=
shing only the first two (RSA-only, non-ephemeral, non-Diffie-Hellman ---- =
follow highlights). But that’s not really the issue being quest=
ioned.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">Can you confirm, is th=
ere a different result if you were to use “openssl s_client –co=
nnect
</span><span style=3D"color:#2E74B5">10.7.110.234:5671 –cipher DHE-RS=
A-AES256-GCM-SHA384”</span><span style=3D"color:#1F497D">???<o:p></o:=
p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">If by running an examp=
le that we are not seeing in NMAP, we get an incomplete handshake, it’=
;s likely that NMAP is accurate in its result.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">Regards,<o:p></o:p></s=
pan></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">Matt<o:p></o:p></span>=
</p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa=
n></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b>From:</b> dev <<a href=3D"mailto:dev-bounces@n=
map.org">[email protected]</a>>
<b>On Behalf Of </b>Lemons, Terry<br>
<b>Sent:</b> Tuesday, June 25, 2019 2:47 PM<br>
<b>To:</b> <a href=3D"mailto:[email protected]">[email protected]</a><br>
<b>Subject:</b> ssl-enum-ciphers not returning all ciphers<o:p></o:p></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Hi<o:p></o:p></span></=
p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">I’m using nmap 7=
.70 on a Linux system to probe a different Linux system that is using Rabbi=
tMQ/Erlang.
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">The cipher list, speci=
fied in the RabbitMQ-specific format, is:<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.1 =
=3D <span style=3D"background:yellow;mso-highlight:yellow">
AES128-GCM-SHA256</span><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.2 =
=3D <span style=3D"background:yellow;mso-highlight:yellow">
AES256-GCM-SHA384</span><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.3 =
=3D DHE-RSA-AES256-GCM-SHA384<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.4 =
=3D DHE-RSA-AES128-GCM-SHA256<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.5 =
=3D DHE-RSA-AES256-SHA256<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.6 =
=3D DHE-RSA-AES128-SHA256<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.7 =
=3D DHE-RSA-AES256-SHA<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.8 =
=3D DHE-RSA-AES128-SHA<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.9 =
=3D ECDHE-RSA-AES128-GCM-SHA256<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.10=
=3D ECDHE-RSA-AES256-SHA384<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.11=
=3D ECDHE-RSA-AES128-GCM-SHA256<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.12=
=3D ECDHE-RSA-AES128-SHA256<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.13=
=3D ECDHE-RSA-AES256-SHA<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">ssl_options.ciphers.14=
=3D ECDHE-RSA-AES128-SHA<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">When I run nmap (with =
-d option, below), it returns only the third and fourth cipher:<o:p></o:p><=
/span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">nmap -sV -p 5671 -d --=
script ssl-enum-ciphers 10.7.110.234<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Starting Nmap 7.70 ( <=
a href=3D"https://nmap.org">
https://nmap.org</a> ) at 2019-06-25 12:36 MDT<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">--------------- Timing=
report ---------------<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5"> hostgroups: min=
1, max 100000<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5"> rtt-timeouts: i=
nit 1000, min 100, max 10000<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5"> max-scan-delay:=
TCP 1000, UDP 1000, SCTP 1000<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5"> parallelism: mi=
n 0, max 0<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5"> max-retries: 10=
, host-timeout: 0<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5"> min-rate: 0, ma=
x-rate: 0<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">----------------------=
-----------------------<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Using Lua 5.3.<o:=
p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Arguments from CL=
I:<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Loaded 44 scripts=
for scanning.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Script Pre-scanni=
ng.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Starting runlevel=
1 (of 2) scan.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Initiating NSE at 12:3=
6<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Completed NSE at 12:36=
, 0.00s elapsed<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Starting runlevel=
2 (of 2) scan.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Initiating NSE at 12:3=
6<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Completed NSE at 12:36=
, 0.00s elapsed<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Initiating Ping Scan a=
t 12:36<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Scanning 10.7.110.234 =
[4 ports]<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Packet capture filter =
(device eth0): dst host 10.7.93.141 and (icmp or icmp6 or ((tcp or udp or s=
ctp) and (src host 10.7.110.234)))<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">We got a ping packet b=
ack from 10.7.110.234: id =3D 48554 seq =3D 0 checksum =3D 16981<o:p></o:p>=
</span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Completed Ping Scan at=
12:36, 0.00s elapsed (1 total hosts)<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Overall sending rates:=
1114.21 packets / s, 42339.83 bytes / s.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">mass_rdns: Using DNS s=
erver 10.7.93.100<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Initiating Parallel DN=
S resolution of 1 host. at 12:36<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">mass_rdns: 13.00s 0/1 =
[#: 1, OK: 0, NX: 0, DR: 0, SF: 0, TR: 3]<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Completed Parallel DNS=
resolution of 1 host. at 12:37, 13.00s elapsed<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">DNS resolution of 1 IP=
s took 13.00s. Mode: Async [#: 1, OK: 0, NX: 0, DR: 1, SF: 0, TR: 3, CN: 0]=
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Initiating SYN Stealth=
Scan at 12:37<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Scanning 10.7.110.234 =
[1 port]<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Packet capture filter =
(device eth0): dst host 10.7.93.141 and (icmp or icmp6 or ((tcp or udp or s=
ctp) and (src host 10.7.110.234)))<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Discovered open port 5=
671/tcp on 10.7.110.234<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Completed SYN Stealth =
Scan at 12:37, 0.00s elapsed (1 total ports)<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Overall sending rates:=
354.99 packets / s, 15619.45 bytes / s.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Initiating Service sca=
n at 12:37<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Scanning 1 service on =
10.7.110.234<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Got nsock CONNECT resp=
onse with status ERROR - aborting this service<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Completed Service scan=
at 12:37, 5.05s elapsed (1 service on 1 host)<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Script scanning 1=
0.7.110.234.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Starting runlevel=
1 (of 2) scan.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Initiating NSE at 12:3=
7<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Starting ssl-enum=
-ciphers against 10.7.110.234:5671.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: [ssl-enum-ciphers=
10.7.110.234:5671] Trying protocol TLSv1.1.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: [ssl-enum-ciphers=
10.7.110.234:5671] Trying protocol SSLv3.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: [ssl-enum-ciphers=
10.7.110.234:5671] Trying protocol TLSv1.2.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: [ssl-enum-ciphers=
10.7.110.234:5671] Trying protocol TLSv1.0.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Finished ssl-enum=
-ciphers against 10.7.110.234:5671.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Finished ssl-enum=
-ciphers against 10.7.110.234:5671.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Finished ssl-enum=
-ciphers against 10.7.110.234:5671.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: [ssl-enum-ciphers=
10.7.110.234:5671] (TLSv1.2) Comparing TLS_RSA_WITH_AES_128_GCM_SHA256 to =
TLS_RSA_WITH_AES_256_GCM_SHA384<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Finished ssl-enum=
-ciphers against 10.7.110.234:5671.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Finished ssl-enum=
-ciphers against 10.7.110.234:5671.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Completed NSE at 12:37=
, 0.07s elapsed<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Starting runlevel=
2 (of 2) scan.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Initiating NSE at 12:3=
7<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Starting rpc-grin=
d against 10.7.110.234:5671.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: [rpc-grind 10.7.1=
10.234:5671] isRPC didn't receive response.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: [rpc-grind 10.7.1=
10.234:5671] Target port 5671 is not a RPC port.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Finished rpc-grin=
d against 10.7.110.234:5671.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Completed NSE at 12:37=
, 0.01s elapsed<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Nmap scan report for 1=
0.7.110.234<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Host is up, received e=
cho-reply ttl 62 (0.0013s latency).<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Scanned at 2019-06-25 =
12:36:49 MDT for 18s<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">PORT =
STATE SERVICE REASON =
VERSION<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">5671/tcp open ss=
l/amqps? syn-ack ttl 62<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">| ssl-enum-ciphers:<o:=
p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">| TLSv1.2:=
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">| &nb=
sp; ciphers:<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">| &nb=
sp; TLS_<span style=3D"background:yellow;mso-highlight:yellow">=
RSA</span>_WITH_<span style=3D"background:yellow;mso-highlight:yellow">AES_=
128_GCM_SHA256
</span>(rsa 2048) - A<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">| &nb=
sp; TLS_<span style=3D"background:yellow;mso-highlight:yellow">=
RSA</span>_WITH_<span style=3D"background:yellow;mso-highlight:yellow">AES_=
256_GCM_SHA384
</span>(rsa 2048) - A<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">| &nb=
sp; compressors:<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">| &nb=
sp; NULL<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">| &nb=
sp; cipher preference: client<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">|_ least strengt=
h: A<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Final times for host: =
srtt: 1292 rttvar: 3833 to: 100000<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Script Post-scann=
ing.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Starting runlevel=
1 (of 2) scan.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Initiating NSE at 12:3=
7<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Completed NSE at 12:37=
, 0.00s elapsed<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">NSE: Starting runlevel=
2 (of 2) scan.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Initiating NSE at 12:3=
7<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Completed NSE at 12:37=
, 0.00s elapsed<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Read from /usr/bin/../=
share/nmap: nmap-payloads nmap-service-probes nmap-services.<o:p></o:p></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Service detection perf=
ormed. Please report any incorrect results at
<a href=3D"https://nmap.org/submit/">https://nmap.org/submit/</a> .<o:p></o=
:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Nmap done: 1 IP addres=
s (1 host up) scanned in 18.80 seconds<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5"> &nbs=
p; Raw packets sent: 5 (196B) | Rcvd: 2=
(72B)<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">#<o:p></o:p></span></p=
>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Is this a known proble=
m? Should I be running nmap with different options? I tried ‘-T=
1’ but it didn’t change the behavior.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">Thanks!<o:p></o:p></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5">tl<o:p></o:p></span></=
p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#2E74B5"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:"=
;Arial",sans-serif;color:#215868">Terry Lemons<o:p></o:p></span></b></=
p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:"=
;Arial",sans-serif;color:#215868"><o:p> </o:p></span></b></p>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Ar=
ial",sans-serif;color:#215868"><img border=3D"0" width=3D"80" height=
=3D"14" style=3D"width:.8333in;height:.1458in" id=3D"Picture_x0020_1" src=
=3D"cid:[email protected]" alt=3D"DellEMC_Logo_Hz_Blue_rgb_10p=
ercent"><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Ar=
ial",sans-serif;color:#215868">Data Protection Division<o:p></o:p></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Ar=
ial",sans-serif;color:#215868"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Ar=
ial",sans-serif;color:#215868">176 South Street, MS 2/B-34<br>
Hopkinton MA 01748<br>
</span><span style=3D"color:#1F497D"><a href=3D"mailto:[email protected]=
m"><span style=3D"color:blue">[email protected]</span></a><o:p></o:p></=
span></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>
--_000_3D3D64550867DA40B2DA7D9F013709C0B3545FF0MX308CL03corpem_--
--_004_3D3D64550867DA40B2DA7D9F013709C0B3545FF0MX308CL03corpem_
Content-Type: image/png; name="image001.png"
Content-Description: image001.png
Content-Disposition: inline; filename="image001.png"; size=2117;
creation-date="Tue, 25 Jun 2019 19:27:42 GMT";
modification-date="Tue, 25 Jun 2019 19:27:42 GMT"
Content-ID: <[email protected]>
Content-Transfer-Encoding: base64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--_004_3D3D64550867DA40B2DA7D9F013709C0B3545FF0MX308CL03corpem_--
--===============9021378630650143166==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/
--===============9021378630650143166==--