Starting Nmap 6.40 ( http://nmap.org ) at 2013-09-11 18:05 Eastern Daylight Time Trying to initialize WinPcap Winpcap present, dynamic linked to: WinPcap version 4.1.2 (packet.dll version 4.1.0.2001), based on libpcap version 1.0 branch 1_0_rel0b (20091008) NPF service is already running. Fetchfile found C:\Program Files (x86)\Nmap/nmap.xsl The max # of sockets we are using is: 0 --------------- Timing report --------------- hostgroups: min 1, max 100000 rtt-timeouts: init 1000, min 100, max 10000 max-scan-delay: TCP 1000, UDP 1000, SCTP 1000 parallelism: min 0, max 0 max-retries: 10, host-timeout: 0 min-rate: 0, max-rate: 0 --------------------------------------------- Fetchfile found C:\Program Files (x86)\Nmap/nmap-payloads Initiating Ping Scan at 18:05 Scanning 2 hosts [4 ports/host] Packet capture filter (device eth0): dst host 172.18.114.122 and (icmp or icmp6 or ((tcp or udp or sctp) and (src host 10.0.18.3 or src host 10.0.18.2))) SENT (0.0990s) ICMP [172.18.114.122 > 10.0.18.2 Echo request (type=8/code=0) id=39051 seq=0] IP [ver=4 ihl=5 tos=0x00 iplen=28 id=7544 foff=0 ttl=39 proto=1 csum=0x3bdb] **TIMING STATS** (0.0990s): IP, probes active/freshportsleft/retry_stack/outstanding/retranwait/onbench, cwnd/ssthresh/delay, timeout/srtt/rttvar/ Groupstats (2/2 incomplete): 1/*/*/*/*/* 10.00/75/* 1000000/-1/-1 10.0.18.3: 0/4/0/0/0/0 10.00/75/0 1000000/-1/-1 10.0.18.2: 1/3/0/1/0/0 10.00/75/0 1000000/-1/-1 Current sending rates: 17.86 packets / s, 500.00 bytes / s. Overall sending rates: 17.86 packets / s, 500.00 bytes / s. RCVD (0.1000s) ICMP [10.0.18.2 > 172.18.114.122 Echo reply (type=0/code=0) id=39051 seq=0] IP [ver=4 ihl=5 tos=0x00 iplen=28 id=10909 foff=0 ttl=61 proto=1 csum=0x18b6] Found 10.0.18.2 in incomplete hosts list. We got a ping packet back from 10.0.18.2: id = 35736 seq = 0 checksum = 29799 ultrascan_host_probe_update called for machine 10.0.18.2 state UNKNOWN -> HOST_UP (trynum 0 time: 1000) Timeout vals: srtt: -1 rttvar: -1 to: 1000000 delta 1000 ==> srtt: 1000 rttvar: 5000 to: 100000 Timeout vals: srtt: -1 rttvar: -1 to: 1000000 delta 1000 ==> srtt: 1000 rttvar: 5000 to: 100000 Changing ping technique for 10.0.18.2 to icmp type 8 code 0 Moving 10.0.18.2 to completed hosts list with 0 outstanding probes. Changing global ping host to 10.0.18.2. SENT (0.1000s) ICMP [172.18.114.122 > 10.0.18.3 Echo request (type=8/code=0) id=62645 seq=0] IP [ver=4 ihl=5 tos=0x00 iplen=28 id=59612 foff=0 ttl=50 proto=1 csum=0x6575] SENT (0.1000s) TCP [172.18.114.122:55378 > 10.0.18.3:443 S seq=2977211387 ack=0 off=6 res=0 win=1024 csum=0x2A19 urp=0 ] IP [ver=4 ihl=5 tos=0x00 iplen=44 id=8792 foff=0 ttl=51 proto=6 csum=0x2ae5] SENT (0.1010s) TCP [172.18.114.122:55378 > 10.0.18.3:80 A seq=0 ack=2977211387 off=5 res=0 win=1024 csum=0x4332 urp=0] IP [ver=4 ihl=5 tos=0x00 iplen=40 id=19736 foff=0 ttl=53 proto=6 csum=0xfe28] SENT (0.1010s) ICMP [172.18.114.122 > 10.0.18.3 Timestamp request (type=13/code=0) id=40819 seq=0 orig=0 recv=0 trans=0] IP [ver=4 ihl=5 tos=0x00 iplen=40 id=43959 foff=0 ttl=59 proto=1 csum=0x998e] **TIMING STATS** (0.1010s): IP, probes active/freshportsleft/retry_stack/outstanding/retranwait/onbench, cwnd/ssthresh/delay, timeout/srtt/rttvar/ Groupstats (1/2 incomplete): 4/*/*/*/*/* 11.00/75/* 100000/1000/5000 10.0.18.3: 4/0/0/4/0/0 10.00/75/0 100000/-1/-1 Current sending rates: 86.21 packets / s, 3103.45 bytes / s. Overall sending rates: 86.21 packets / s, 3103.45 bytes / s. RCVD (0.1020s) ICMP [10.0.18.3 > 172.18.114.122 Echo reply (type=0/code=0) id=62645 seq=0] IP [ver=4 ihl=5 tos=0x00 iplen=28 id=1385 foff=0 ttl=61 proto=1 csum=0x3de9] Found 10.0.18.3 in incomplete hosts list. We got a ping packet back from 10.0.18.3: id = 46580 seq = 0 checksum = 18955 ultrascan_host_probe_update called for machine 10.0.18.3 state UNKNOWN -> HOST_UP (trynum 0 time: 2000) Timeout vals: srtt: -1 rttvar: -1 to: 1000000 delta 2000 ==> srtt: 2000 rttvar: 5000 to: 100000 Timeout vals: srtt: 1000 rttvar: 5000 to: 100000 delta 2000 ==> srtt: 1125 rttvar: 4000 to: 100000 Changing ping technique for 10.0.18.3 to icmp type 8 code 0 Moving 10.0.18.3 to completed hosts list with 0 outstanding probes. Changing global ping host to 10.0.18.3. Completed Ping Scan at 18:05, 0.06s elapsed (2 total hosts) Overall sending rates: 84.75 packets / s, 3050.85 bytes / s. pcap stats: 11 packets received by filter, 0 dropped by kernel. Interface {065f0c42-703a-11de-9954-806e6f6e6963} is not known; ignoring its nameservers. mass_rdns: Using DNS server 10.0.31.37 mass_rdns: Using DNS server 64.102.6.247 Initiating Parallel DNS resolution of 2 hosts. at 18:05 mass_rdns: TRANSMITTING for <10.0.18.3> (server <64.102.6.247>) mass_rdns: TRANSMITTING for <10.0.18.2> (server <10.0.31.37>) CAPACITY <64.102.6.247> = 12 mass_rdns: NXDOMAIN mass_rdns: 0.14s 0/2 [#: 2, OK: 0, NX: 0, DR: 0, SF: 0, TR: 2] CAPACITY <10.0.31.37> = 12 mass_rdns: OK MATCHED <10.0.18.2> to Completed Parallel DNS resolution of 2 hosts. at 18:05, 0.03s elapsed DNS resolution of 2 IPs took 0.15s. Mode: Async [#: 2, OK: 1, NX: 1, DR: 0, SF: 0, TR: 2, CN: 0] Nmap scan report for 10.0.18.3 Host is up, received echo-reply (0.0020s latency). Final times for host: srtt: 2000 rttvar: 5000 to: 100000 Nmap scan report for fi-6120-b.mgmt.test (10.0.18.2) Host is up, received echo-reply (0.0010s latency). Final times for host: srtt: 1000 rttvar: 5000 to: 100000 Read from C:\Program Files (x86)\Nmap: nmap-payloads. Nmap done: 2 IP addresses (2 hosts up) scanned in 0.25 seconds Raw packets sent: 5 (180B) | Rcvd: 2 (56B)