mcolgin - 2004-10-11

This source package seems to be working great, it compiled up perfectly (after making the changes to the Makefile as described in README.sql). Although, I haven't started testing the advanced 3.70 features yet.

I've been doing some pretty specific testing of the straight TCP connecting (-sT) to 3 different ports, logging their results with your patches and then pulling the data out with some PHP modules that I'm writing.

I think there's a couple of problems that I've ran into...

Command Line:
./nmap -sT -p 80,443,22,9999 -sV -O --mysql --run_id 1999 192.168.0.106

Command Output:
WARNING!  The following files exist and are readable: /usr/local/share/nmap/nmap-os-fingerprints and ./nmap-os-fingerprints.  I am choosing /usr/local/share/nmap/nmap-os-fingerprints for security reasons.  set NMAPDIR=. to give priority to files in your local directory

Starting nmap 3.70 ( http://www.insecure.org/nmap/ ) at 2004-10-10 18:31 PDT
WARNING!  The following files exist and are readable: /usr/local/share/nmap/nmap-service-probes and ./nmap-service-probes.  I am choosing /usr/local/share/nmap/nmap-service-probes for security reasons.  set NMAPDIR=. to give priority to files in your local directory
WARNING!  The following files exist and are readable: /usr/local/share/nmap/nmap-rpc and ./nmap-rpc.  I am choosing /usr/local/share/nmap/nmap-rpc for security reasons.  set NMAPDIR=. to give priority to files in your local directory
Interesting ports on 192.168.0.106:
WARNING!  The following files exist and are readable: /usr/local/share/nmap/nmap-services and ./nmap-services.  I am choosing /usr/local/share/nmap/nmap-services for security reasons.  set NMAPDIR=. to give priority to files in your local directory
PORT     STATE  SERVICE VERSION
22/tcp   open   ssh     OpenSSH 3.9p1 (protocol 1.99)
80/tcp   closed http
443/tcp  closed https
9999/tcp closed abyss
WARNING!  The following files exist and are readable: /usr/local/share/nmap/nmap-mac-prefixes and ./nmap-mac-prefixes.  I am choosing /usr/local/share/nmap/nmap-mac-prefixes for security reasons.  set NMAPDIR=. to give priority to files in your local directory
MAC Address: 00:04:76:41:CF:D5 (3 Com)
Device type: general purpose
Running: Linux 2.4.X|2.5.X|2.6.X
OS details: Linux 2.4.18 - 2.6.4 (x86)
Uptime 0.042 days (since Sun Oct 10 17:31:21 2004)

Nmap run completed -- 1 IP address (1 host up) scanned in 3.783 seconds

QUESTIONS

#1: targets.mac and portstat.target_ip does not seem to be populating with NULL (tablename.fieldname).

#2: hoststats.open_ports and hoststats.ports_scanned seem to always be set to 0. When they should be 3 and 4, respectively.

#3: targets.os_guessed, targets.os_known and targets.fingerprint are all NULL, but in my test

#4: What is the purpose of the following field, it seems to be always NULL -- targets.flag

Please let me know if I can help in anyway.

- Matt
mcolgin [at] gmail [dot] com