Link to home
Start Free TrialLog in
Avatar of amigan_99
amigan_99Flag for United States of America

asked on

How can nmap figure out that ports are being filter if - they're being filtered?

How can nmap figure out that ports are being filter if - they're being filtered?


Nmap scan report for scoobydoo.whereru.com (10.1.11.16)

Host is up (0.033s latency).

Not shown: 82 closed tcp ports (reset)

PORT     STATE    SERVICE

9/tcp    filtered discard

13/tcp   filtered daytime

80/tcp   filtered http

144/tcp  filtered news

389/tcp  filtered ldap

443/tcp  filtered https

514/tcp  filtered shell

1110/tcp filtered nfsd-status

2000/tcp filtered cisco-sccp

2001/tcp filtered dc

3128/tcp filtered squid-http

3389/tcp open     ms-wbt-server

5060/tcp filtered sip

5432/tcp filtered postgresql

5666/tcp filtered nrpe

5800/tcp filtered vnc-http

8080/tcp filtered http-proxy

8443/tcp filtered https-alt

ASKER CERTIFIED SOLUTION
Avatar of noci
noci

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of amigan_99

ASKER

in logging I can see the specific TCP SYNs to the myriad ports sent from nmap to the target. But you're saying ICMP is what's informing nmap of what appears to be filtered?
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial