The port table is passed to an NSE service script (i.e. The section called “Understanding an Nmap Fingerprint”. If OS detection was performed, this is a string containing the OSįingerprint for the host. An empty table represents a timed-out hop. The TTL for an entry is implicit given its position This is an array of traceroute hops, present when the (the probe timeout), all given in floating-point seconds. Round trip time), rttvar (round trip time variance), and timeout The section called “Round Trip Time Estimation”). This table contains Nmap's timing data for the host (see
Our host's (running Nmap) source IP address as a 4-byte (IPv4) or 16-byte (IPv6) string. The target host's IP address as a 4-byte (IPv4) or 16-byte (IPv6) string. The MTU (maximum transmission unit) for host.interface, Host (either our network card's, or (with Our own MAC address, which was used to connect to the Of the first hop in the route to the host, or The MAC address is generally only available for hosts directly connected on a LAN and only if Nmap is doing a raw packet scan such as SYN scan. Of the destination host (six-byte-long binary on the same network segment as) the host running Nmap. Packet that is also used to set host.reason.Ī Boolean value indicating whether or not the target host isĭirectly connected to (i.e. The status of the target host, when it arrived. For example, an echo-reply fromĬontains the TTL value of the response packet, that was used to determine The reason is given by the type of the packet thatĭetermined the state. If the target given on the command line contains a netmask or is an IPĬontains a string representation of the reason why the target host is in The value of the field is an empty string.Ĭontains the name of the host as specified on the command line. Same IP address is used as the one chosen for the scan.Ĭontains the reverse DNS entry of the scanned target host If the scan was run against a host name and itsĭNS lookup returned more than one IP addresses, then the
Only entries corresponding to perfect OS matches are putĬontains a string representation of the IP address of the (See the section called “Decoding the Reference Fingerprint Format”įor a description of OS match fields.) Fields may beĬlass Linux | Linux | 2.6.X | general purposeĬlass Linux | Linux | 3.X | general purposeĬpe = Each OSĬlass consists of a vendor, OS family, OS generation,įor the class. Human-readable name and an array of OS classes. IP address and the host name of the scanned target.Īn array of OS match tables. The host (if the -O switch was supplied), the It contains information on the operating system run by This table is passed as a parameter to the rule and actionįunctions.
0 kommentar(er)
