full-disclosure - nmap: the definitive guide

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Wed Oct 12 15:06:50 2005
From: hasklej at aol.com (hasklej@....com)
Subject: nmap: the definitive guide

the next fyodor's book is for sale
come on #seksonline at irc.gigachat.net
here the sommaire of th book !

<HTML
><HEAD
><TITLE
>Nmap Security Scanner: The Definitive Guide</TITLE
><META
NAME="GENERATOR"
CONTENT="Modular DocBook HTML Stylesheet Version 1.76b+
"><LINK
REL="NEXT"
TITLE="Preface"
HREF="preface.html"></HEAD
><BODY
CLASS="book"
BGCOLOR="#FFFFFF"
TEXT="#000000"
LINK="#0000FF"
VLINK="#840084"
ALINK="#0000FF"
><!--#include virtual="/templates/standard_body_top.html" --><DIV
CLASS="BOOK"
><A
NAME="nmapguide"
></A
><DIV
CLASS="TITLEPAGE"
><H1
CLASS="title"
><A
NAME="nmapguide"
></A
>Nmap Security Scanner: The Definitive Guide</H1
><H3
CLASS="author"
><A
NAME="AEN7"
></A
>Fyodor </H3
><H4
CLASS="EDITEDBY"
>Edited by</H4
><H3
CLASS="editor"
> </H3
><HR></DIV
><DIV
CLASS="TOC"
><DL
><DT
><B
>Table of Contents</B
></DT
><DT
><A
HREF="preface.html"
>Preface</A
></DT
><DD
><DL
><DT
><A
HREF="preface.html#foreword"
>Foreword</A
></DT
><DT
><A
HREF="whats-inside.html"
>What's Inside</A
></DT
><DT
><A
HREF="style-conventions.html"
>Style Conventions</A
></DT
><DT
><A
HREF="preface-examples.html"
>Examples</A
></DT
><DT
><A
HREF="preface-comments.html"
>Comments and Questions</A
></DT
><DT
><A
HREF="acknowledgements.html"
>Acknowledgments</A
></DT
></DL
></DD
><DT
>1. <A
HREF="nmap-demos.html"
>Getting Started with Nmap</A
></DT
><DD
><DL
><DT
><A
HREF="nmap-demos.html#AEN51"
>Introduction</A
></DT
><DT
><A
HREF="nmap-overview-and-demos.html"
>Nmap overview and demonstration</A
></DT
><DD
><DL
><DT
><A
HREF="nmap-overview-and-demos.html#AEN68"
>Avatar Online</A
></DT
><DT
><A
HREF="nmap-overview-and-demos.html#AEN181"
>Saving the Human Race</A
></DT
><DT
><A
HREF="nmap-overview-and-demos.html#madhat-story"
>MadHat in Wonderland</A
></DT
></DL
></DD
><DT
><A
HREF="legal-issues.html"
>Legal issues</A
></DT
><DD
><DL
><DT
><A
HREF="legal-issues.html#AEN242"
>Is unauthorized port scanning a crime?</A
></DT
><DT
><A
HREF="legal-issues.html#AEN318"
>Can port scanning crash the target computer/networks?</A
></DT
><DT
><A
HREF="legal-issues.html#AEN340"
>Misc: Copyright, license, (lack of) warranty, export control 
information</A
></DT
></DL
></DD
></DL
></DD
><DT
>2. <A
HREF="nmap-install.html"
>Obtaining, Installing, and Removing Nmap</A
></DT
><DD
><DL
><DT
><A
HREF="nmap-install.html#AEN379"
>Introduction</A
></DT
><DD
><DL
><DT
><A
HREF="nmap-install.html#AEN382"
>Testing whether Nmap is already installed</A
></DT
><DT
><A
HREF="nmap-install.html#AEN400"
>Verifying the integrity of Nmap downloads</A
></DT
><DT
><A
HREF="nmap-install.html#nmap-interfaces"
>Command-line and graphical interfaces</A
></DT
></DL
></DD
><DT
><A
HREF="install-source.html"
>UNIX Compilation and
installation from source code</A
></DT
><DD
><DL
><DT
><A
HREF="install-source.html#AEN475"
>Configure directives</A
></DT
><DT
><A
HREF="install-source.html#AEN546"
>If you encounter compilation problems</A
></DT
></DL
></DD
><DT
><A
HREF="install-linux.html"
>Linux Distributions</A
></DT
><DD
><DL
><DT
><A
HREF="install-linux.html#AEN582"
>RPM-based distributions (Red Hat, Mandrake, Suse, Fedora)</A
></DT
><DT
><A
HREF="install-linux.html#AEN605"
>Debian Linux</A
></DT
><DT
><A
HREF="install-linux.html#AEN611"
>Gentoo Linux</A
></DT
><DT
><A
HREF="install-linux.html#AEN615"
>Other Linux distributions</A
></DT
></DL
></DD
><DT
><A
HREF="install-windows.html"
>Windows</A
></DT
><DD
><DL
><DT
><A
HREF="install-windows.html#AEN635"
>Command line .zip binaries</A
></DT
><DT
><A
HREF="install-windows.html#nmap-intro-nmapwin"
>Nmapwin</A
></DT
><DT
><A
HREF="install-windows.html#AEN713"
>Compile from source code</A
></DT
></DL
></DD
><DT
><A
HREF="install-solaris.html"
>Sun Solaris</A
></DT
><DT
><A
HREF="install-macosx.html"
>Apple Mac OS X</A
></DT
><DT
><A
HREF="install-bsd.html"
>FreeBSD / OpenBSD / NetBSD</A
></DT
><DD
><DL
><DT
><A
HREF="install-bsd.html#AEN804"
>OpenBSD binary packages and source ports instructions</A
></DT
><DT
><A
HREF="install-bsd.html#AEN832"
>FreeBSD binary package and source ports instructions</A
></DT
><DT
><A
HREF="install-bsd.html#AEN852"
>NetBSD binary package instructions</A
></DT
></DL
></DD
><DT
><A
HREF="install-other-platforms.html"
>Amiga, HP-UX, IRIX, and Other Platforms</A
></DT
><DT
><A
HREF="install-zaurus-pda.html"
>[RECIPE] Installing Nmap on a PDA</A
></DT
><DD
><DL
><DT
><A
HREF="install-zaurus-pda.html#AEN902"
>Installing Nmap on the Zaurus</A
></DT
><DT
><A
HREF="install-zaurus-pda.html#AEN947"
>Using Nmap and NmapFE on the Zaurus</A
></DT
></DL
></DD
><DT
><A
HREF="removing-nmap.html"
>Removing Nmap</A
></DT
></DL
></DD
><DT
>3. <A
HREF="host-enumeration.html"
>Host Enumeration ("Ping Scanning")</A
></DT
><DD
><DL
><DT
><A
HREF="host-enumeration.html#host-enumeration-intro"
>Introduction</A
></DT
><DT
><A
HREF="host-enumeration-specify-targets.html"
>Specifying Target Hosts and Networks</A
></DT
><DT
><A
HREF="host-enumeration-controls.html"
>Host Enumeration Controls</A
></DT
><DD
><DL
><DT
><A
HREF="host-enumeration-controls.html#AEN1005"
>List Scan (<TT
CLASS="option"
>-sL</TT
>)</A
></DT
><DT
><A
HREF="host-enumeration-controls.html#AEN1021"
>Ping Scan (<TT
CLASS="option"
>-sP</TT
>)</A
></DT
><DT
><A
HREF="host-enumeration-controls.html#host-enum-p0"
>Disable Ping (<TT
CLASS="option"
>-P0</TT
>)</A
></DT
></DL
></DD
><DT
><A
HREF="host-enumeration-techniques.html"
>Host Enumeration
Techniques</A
></DT
><DD
><DL
><DT
><A
HREF="host-enumeration-techniques.html#AEN1060"
>TCP SYN Ping (<TT
CLASS="option"
>-PS[portlist]</TT
>)</A
></DT
><DT
><A
HREF="host-enumeration-techniques.html#AEN1077"
>TCP ACK Ping (<TT
CLASS="option"
>-PA[portlist]</TT
>)</A
></DT
><DT
><A
HREF="host-enumeration-techniques.html#AEN1101"
>UDP Ping (<TT
CLASS="option"
>-PU[portlist]</TT
>)</A
></DT
><DT
><A
HREF="host-enumeration-techniques.html#AEN1111"
>ICMP Ping Types (<TT
CLASS="option"
>-PE</TT
>, <TT
CLASS="option"
>-PP</TT
>, and <TT
CLASS="option"
>-PM</TT
>)</A
></DT
><DT
><A
HREF="host-enumeration-techniques.html#AEN1124"
>Default Combination (<TT
CLASS="option"
>-PB</TT
>)</A
></DT
><DT
><A
HREF="host-enumeration-techniques.html#AEN1131"
>ARP Scan (<TT
CLASS="option"
>-P?</TT
>)</A
></DT
></DL
></DD
><DT
><A
HREF="host-enumeration-strategies.html"
>Putting it All Together: Host Enumeration Strategies</A
></DT
><DD
><DL
><DT
><A
HREF="host-enumeration-strategies.html#AEN1138"
>Related Options</A
></DT
><DT
><A
HREF="host-enumeration-strategies.html#AEN1225"
>Choosing and Combining Ping Options</A
></DT
></DL
></DD
><DT
><A
HREF="host-enumeration-find-ips.html"
>Finding an Organization's IP addresses to Scan</A
></DT
><DT
><A
HREF="host-enumeration-algorithms.html"
>Host Enumeration Code Algorithms</A
></DT
></DL
></DD
><DT
>4. <A
HREF="port-scanning.html"
>Port Scanning Overview</A
></DT
><DD
><DL
><DT
><A
HREF="port-scanning.html#port-scanning-intro"
>Introduction to Port Scanning</A
></DT
><DD
><DL
><DT
><A
HREF="port-scanning.html#port-scanning-port-intro"
>What exactly is a port?</A
></DT
><DT
><A
HREF="port-scanning.html#port-scanning-what-is-it"
>What is port scanning?</A
></DT
><DT
><A
HREF="port-scanning.html#port-scanning-why"
>Why scan ports?</A
></DT
></DL
></DD
><DT
><A
HREF="port-scanning-tutorial.html"
>A Quick Port Scanning Tutorial</A
></DT
><DT
><A
HREF="port-scanning-options.html"
>Command-line flags</A
></DT
><DD
><DL
><DT
><A
HREF="port-scanning-options.html#port-scanning-options-scantypes"
>Selecting scan techniques</A
></DT
><DT
><A
HREF="port-scanning-options.html#port-scanning-options-ports"
>Selecting ports to scan</A
></DT
><DT
><A
HREF="port-scanning-options.html#port-scanning-options-timing"
>Timing-related options</A
></DT
><DT
><A
HREF="port-scanning-options.html#port-scanning-options-output"
>Output format and verbosity options</A
></DT
><DT
><A
HREF="port-scanning-options.html#port-scanning-options-firewall-ids-evasi
on"
>Firewall and IDS evasion options</A
></DT
><DT
><A
HREF="port-scanning-options.html#port-scanning-options-targets"
>Specifying targets</A
></DT
><DT
><A
HREF="port-scanning-options.html#port-scanning-options-misc"
>Miscellaneous options</A
></DT
></DL
></DD
><DT
><A
HREF="port-scanning-ipv6.html"
>IPv6 Scanning [<TT
CLASS="option"
>-6</TT
>]</A
></DT
><DT
><A
HREF="recipe-find-open-port.html"
>[RECIPE] Scanning a large network for a certain open TCP port</A
></DT
><DD
><DL
><DT
><A
HREF="recipe-find-open-port.html#AEN1811"
>Problem</A
></DT
><DT
><A
HREF="recipe-find-open-port.html#AEN1814"
>Solution</A
></DT
><DT
><A
HREF="recipe-find-open-port.html#AEN1836"
>Discussion</A
></DT
><DT
><A
HREF="recipe-find-open-port.html#AEN1899"
>See Also</A
></DT
></DL
></DD
></DL
></DD
><DT
>5. <A
HREF="scan-methods.html"
>Port Scanning Techniques and Algorithms</A
></DT
><DD
><DL
><DT
><A
HREF="scan-methods.html#scan-methods-intro"
>Introduction</A
></DT
><DT
><A
HREF="scan-methods-syn-scan.html"
>TCP SYN (Stealth) Scan</A
></DT
><DT
><A
HREF="scan-methods-connect-scan.html"
>TCP Connect() Scan</A
></DT
><DT
><A
HREF="scan-methods-udp-scan.html"
>UDP Scan</A
></DT
><DD
><DL
><DT
><A
HREF="scan-methods-udp-scan.html#AEN2130"
>Disambiguating open from filtered UDP ports</A
></DT
><DT
><A
HREF="scan-methods-udp-scan.html#scan-methods-udp-optimizing"
>Speeding up UDP scans</A
></DT
></DL
></DD
><DT
><A
HREF="scan-methods-null-fin-xmas-scan.html"
>TCP Null, FIN, and Xmas Scans</A
></DT
><DT
><A
HREF="scan-methods-custom-scanflags.html"
>Custom scan types with <TT
CLASS="option"
>--scanflags</TT
></A
></DT
><DD
><DL
><DT
><A
HREF="scan-methods-custom-scanflags.html#scan-methods-custom-synfin"
>Custom SYN/FIN scan</A
></DT
><DT
><A
HREF="scan-methods-custom-scanflags.html#scan-methods-custom-psh"
>PSH scan</A
></DT
></DL
></DD
><DT
><A
HREF="scan-methods-ack-scan.html"
>TCP ACK Scan</A
></DT
><DT
><A
HREF="scan-methods-window-scan.html"
>TCP Window Scan</A
></DT
><DT
><A
HREF="scan-methods-maimon-scan.html"
>TCP Maimon Scan</A
></DT
><DT
><A
HREF="scan-methods-idle-scan.html"
>TCP Idle Scan</A
></DT
><DD
><DL
><DT
><A
HREF="scan-methods-idle-scan.html#scan-methods-idle-scan-finding-zombies"

>Finding a working idle scan zombie host</A
></DT
><DT
><A
HREF="scan-methods-idle-scan.html#scan-methods-idle-scan-execution"
>Executing an Idle scan</A
></DT
><DT
><A
HREF="scan-methods-idle-scan.html#scan-methods-idle-scan-algorithms"
>Idle scan implementation algorithms</A
></DT
></DL
></DD
><DT
><A
HREF="scan-methods-ip-protocol-scan.html"
>IP Protocol Scan</A
></DT
><DT
><A
HREF="scan-methods-ftp-bounce-scan.html"
>TCP FTP Bounce Scan</A
></DT
><DT
><A
HREF="port-scanning-algorithms.html"
>Scan Code and Algorithms</A
></DT
><DD
><DL
><DT
><A
HREF="port-scanning-algorithms.html#AEN2636"
>Network condition monitoring</A
></DT
><DT
><A
HREF="port-scanning-algorithms.html#AEN2639"
>Host and port parallelization</A
></DT
><DT
><A
HREF="port-scanning-algorithms.html#AEN2648"
>Round trip time estimation</A
></DT
><DT
><A
HREF="port-scanning-algorithms.html#AEN2669"
>Congestion control</A
></DT
><DT
><A
HREF="port-scanning-algorithms.html#AEN2674"
>Port scan pings</A
></DT
><DT
><A
HREF="port-scanning-algorithms.html#AEN2678"
>Inferred neighbor times</A
></DT
><DT
><A
HREF="port-scanning-algorithms.html#AEN2682"
>Adaptive retransmission</A
></DT
><DT
><A
HREF="port-scanning-algorithms.html#AEN2685"
>Scan delay</A
></DT
></DL
></DD
></DL
></DD
><DT
>6. <A
HREF="scan-performance.html"
>Optimizing Nmap Performance</A
></DT
><DT
>7. <A
HREF="version-scan.html"
>Service and Application Version Detection</A
></DT
><DD
><DL
><DT
><A
HREF="version-scan.html#version-scan-intro"
>Introduction</A
></DT
><DT
><A
HREF="version-scan-examples.html"
>Usage/Examples</A
></DT
><DT
><A
HREF="version-scan-technique.html"
>Technique Described</A
></DT
><DT
><A
HREF="version-scan-technique-demo.html"
>Technique Demonstrated</A
></DT
><DT
><A
HREF="version-scan-post-processors.html"
>Post-processors</A
></DT
><DD
><DL
><DT
><A
HREF="version-scan-post-processors.html#version-detection-rpc"
>RPC Grinding</A
></DT
><DT
><A
HREF="version-scan-post-processors.html#AEN2888"
>SSL Post-processor notes</A
></DT
></DL
></DD
><DT
><A
HREF="version-scan-fileformat.html"
><TT
CLASS="filename"
>nmap-service-probes</TT
> File Format</A
></DT
><DD
><DL
><DT
><A
HREF="version-scan-fileformat.html#AEN2918"
>The <TT
CLASS="literal"
>Probe</TT
> directive</A
></DT
><DT
><A
HREF="version-scan-fileformat.html#AEN2959"
>The <TT
CLASS="literal"
>match</TT
> directive</A
></DT
><DT
><A
HREF="version-scan-fileformat.html#AEN3006"
>The <TT
CLASS="literal"
>softmatch</TT
> directive</A
></DT
><DT
><A
HREF="version-scan-fileformat.html#AEN3022"
>The <TT
CLASS="literal"
>ports</TT
> and <TT
CLASS="literal"
>sslports</TT
> directives</A
></DT
><DT
><A
HREF="version-scan-fileformat.html#AEN3049"
>The <TT
CLASS="literal"
>totalwaitms</TT
> directive</A
></DT
><DT
><A
HREF="version-scan-fileformat.html#version-scan-fileformat-example"
>Putting it all together</A
></DT
></DL
></DD
><DT
><A
HREF="version-scan-community.html"
>Community Contributions</A
></DT
><DT
><A
HREF="version-detection-find-service-fast.html"
>[RECIPE] Find all servers running an insecure or nonstandard version 
of an application</A
></DT
><DT
><A
HREF="version-detection-hack-it.html"
>[RECIPE] Hack version detection to suit custom needs, such as open 
proxy detection</A
></DT
></DL
></DD
><DT
>8. <A
HREF="os-fingerprinting.html"
>OS Fingerprinting</A
></DT
><DT
>9. <A
HREF="defeating-firewalls-ids.html"
>Detecting and Subverting Firewalls and Intrusion Detection Systems</A
></DT
><DD
><DL
><DT
><A
HREF="defeating-firewalls-ids.html#firewalls-ids-intro"
>Introduction</A
></DT
><DT
><A
HREF="firewalls-ids-justification.html"
>Why would whitehats ever do this?</A
></DT
><DT
><A
HREF="determining-firewall-rules.html"
>Determining Firewall Rules</A
></DT
><DD
><DL
><DT
><A
HREF="determining-firewall-rules.html#AEN3144"
>Standard SYN scan</A
></DT
><DT
><A
HREF="determining-firewall-rules.html#defeating-firewalls-ids-ackscan"
>ACK scan</A
></DT
><DT
><A
HREF="determining-firewall-rules.html#defeating-firewalls-ipid-tricks"
>IPID tricks</A
></DT
><DT
><A
HREF="determining-firewall-rules.html#AEN3228"
>UDP version scanning</A
></DT
></DL
></DD
><DT
><A
HREF="firewall-subversion.html"
>Bypassing Firewall Rules</A
></DT
><DD
><DL
><DT
><A
HREF="firewall-subversion.html#AEN3247"
>Exotic scan flags</A
></DT
><DT
><A
HREF="firewall-subversion.html#defeating-firewalls-source-port"
>Source port manipulation</A
></DT
><DT
><A
HREF="firewall-subversion.html#defeating-firewalls-ipv6"
>IPv6 attacks</A
></DT
><DT
><A
HREF="firewall-subversion.html#AEN3285"
>IPID Idle Scanning</A
></DT
><DT
><A
HREF="firewall-subversion.html#AEN3289"
>Multiple ping probes</A
></DT
><DT
><A
HREF="firewall-subversion.html#defeating-firewalls-fragmentation"
>Fragmentation</A
></DT
><DT
><A
HREF="firewall-subversion.html#AEN3299"
>Proxies</A
></DT
><DT
><A
HREF="firewall-subversion.html#AEN3306"
>Source routing</A
></DT
><DT
><A
HREF="firewall-subversion.html#AEN3311"
>FTP Bounce Scan</A
></DT
><DT
><A
HREF="firewall-subversion.html#AEN3319"
>Take an alternative path</A
></DT
></DL
></DD
><DT
><A
HREF="subvert-ids.html"
>Subverting Intrusion Detection Systems</A
></DT
><DD
><DL
><DT
><A
HREF="subvert-ids.html#AEN3326"
>Intrusion detection system detection</A
></DT
><DT
><A
HREF="subvert-ids.html#AEN3363"
>Avoiding intrusion detection systems</A
></DT
><DT
><A
HREF="subvert-ids.html#AEN3433"
>Misleading intrusion detection systems</A
></DT
><DT
><A
HREF="subvert-ids.html#AEN3468"
>Exploiting intrusion detection systems</A
></DT
><DT
><A
HREF="subvert-ids.html#AEN3472"
>Ignoring intrusion detection systems</A
></DT
></DL
></DD
><DT
><A
HREF="firewall-ids-packet-forgery.html"
>Detecting packet forgery by firewall and intrusion detection systems</A
></DT
><DD
><DL
><DT
><A
HREF="firewall-ids-packet-forgery.html#AEN3484"
>Look for TTL consistency</A
></DT
><DT
><A
HREF="firewall-ids-packet-forgery.html#AEN3502"
>Look for IPID and sequence number consistency</A
></DT
><DT
><A
HREF="firewall-ids-packet-forgery.html#AEN3521"
>The Bogus Checksum trick</A
></DT
><DT
><A
HREF="firewall-ids-packet-forgery.html#AEN3525"
>Close Analysis of packet headers and contents</A
></DT
><DT
><A
HREF="firewall-ids-packet-forgery.html#AEN3528"
>Unusual network uniformity</A
></DT
></DL
></DD
></DL
></DD
><DT
>10. <A
HREF="defending-against-nmap.html"
>Defenses against Nmap</A
></DT
><DD
><DL
><DT
><A
HREF="defending-against-nmap.html#nmap-defenses-intro"
>Introduction</A
></DT
><DT
><A
HREF="nmap-defenses-proactive-scanning.html"
>Proactive Scanning</A
></DT
><DT
><A
HREF="nmap-defenses-firewalls.html"
>Blocking and Slowing Nmap with Firewalls</A
></DT
><DT
><A
HREF="nmap-defenses-detection.html"
>Detecting Nmap Scans</A
></DT
><DT
><A
HREF="nmap-defenses-trickery.html"
>Clever Trickery</A
></DT
><DD
><DL
><DT
><A
HREF="nmap-defenses-trickery.html#AEN3573"
>Hiding Services on Obscure Ports</A
></DT
><DT
><A
HREF="nmap-defenses-trickery.html#AEN3582"
>Port knocking</A
></DT
><DT
><A
HREF="nmap-defenses-trickery.html#AEN3597"
>Honeypots and Honeynets</A
></DT
><DT
><A
HREF="nmap-defenses-trickery.html#AEN3601"
>OS Spoofing</A
></DT
><DT
><A
HREF="nmap-defenses-trickery.html#AEN3624"
>Tar pits</A
></DT
><DT
><A
HREF="nmap-defenses-trickery.html#nmap-defense-reactive-port-sentry"
>Reactive port scan detection</A
></DT
><DT
><A
HREF="nmap-defenses-trickery.html#AEN3632"
>Escalating arms race</A
></DT
></DL
></DD
></DL
></DD
><DT
>11. <A
HREF="output-formats.html"
>Nmap Output Formats</A
></DT
><DD
><DL
><DT
><A
HREF="output-formats.html#output-formats-intro"
>Introduction</A
></DT
><DT
><A
HREF="output-formats-commandline-flags.html"
>Command-line flags</A
></DT
><DD
><DL
><DT
><A
HREF="output-formats-commandline-flags.html#output-formats-flags-type"
>Controlling output type</A
></DT
><DT
><A
HREF="output-formats-commandline-flags.html#output-formats-flags-verbosit
y"
>Controlling verbosity of output</A
></DT
><DT
><A
HREF="output-formats-commandline-flags.html#output-formats-flags-debuggin
g"
>Enabling debugging output</A
></DT
><DT
><A
HREF="output-formats-commandline-flags.html#output-formats-flags-packet-t
race"
>Enabling packet tracing</A
></DT
><DT
><A
HREF="output-formats-commandline-flags.html#output-formats-flags-resume"
>Resuming canceled scans</A
></DT
></DL
></DD
><DT
><A
HREF="output-formats-interactive.html"
>Interactive output</A
></DT
><DT
><A
HREF="output-formats-normal-output.html"
>Normal output (<TT
CLASS="option"
>-oN</TT
>)</A
></DT
><DT
><A
HREF="output-formats-script-kiddie.html"
>$crIpT kIddI3 0uTPut (<TT
CLASS="option"
>-oS</TT
>)</A
></DT
><DT
><A
HREF="output-formats-xml-output.html"
>XML output (<TT
CLASS="option"
>-oX</TT
>)</A
></DT
><DD
><DL
><DT
><A
HREF="output-formats-xml-output.html#output-formats-xml-usage"
>Using XML Output</A
></DT
></DL
></DD
><DT
><A
HREF="output-formats-xml-with-perl.html"
>Manipulating XML output with Perl</A
></DT
><DT
><A
HREF="output-formats-output-to-database.html"
>Output to a database</A
></DT
><DT
><A
HREF="output-formats-output-to-html.html"
>Creating HTML reports</A
></DT
><DT
><A
HREF="output-formats-grepable-output.html"
>Grepable output (<TT
CLASS="option"
>-oG</TT
>)</A
></DT
><DD
><DL
><DT
><A
HREF="output-formats-grepable-output.html#output-formats-grepable-fields"

>Grepable output fields</A
></DT
><DT
><A
HREF="output-formats-grepable-output.html#output-formats-grepable-command
line-parsing"
>Parsing grepable output on the command line</A
></DT
></DL
></DD
></DL
></DD
><DT
>12. <A
HREF="data-files.html"
>Understanding and Customizing Nmap Data Files</A
></DT
><DD
><DL
><DT
><A
HREF="data-files.html#data-files-intro"
>Introduction</A
></DT
><DT
><A
HREF="nmap-services.html"
><TT
CLASS="filename"
>nmap-services</TT
></A
></DT
><DT
><A
HREF="nmap-service-probes.html"
><TT
CLASS="filename"
>nmap-service-probes</TT
></A
></DT
><DT
><A
HREF="nmap-rpc.html"
><TT
CLASS="filename"
>nmap-rpc</TT
></A
></DT
><DT
><A
HREF="nmap-os-fingerprints.html"
><TT
CLASS="filename"
>nmap-os-fingerprints</TT
></A
></DT
><DT
><A
HREF="nmap-mac-prefixes.html"
><TT
CLASS="filename"
>nmap-mac-prefixes</TT
></A
></DT
><DT
><A
HREF="nmap-protocols.html"
><TT
CLASS="filename"
>nmap-protocols</TT
></A
></DT
><DT
><A
HREF="data-files-replacing-data-files.html"
><TT
CLASS="filename"
>Using
Customized Data Files</TT
></A
></DT
></DL
></DD
><DT
>13. <A
HREF="cookbook.html"
>Nmap Cookbook</A
></DT
><DT
>14. <A
HREF="nmap-history-future.html"
>The History and Future of Nmap</A
></DT
><DT
>15. <A
HREF="reference-guide.html"
>Nmap Reference Guide</A
></DT
><DT
>A. <A
HREF="app-nmap-dtd.html"
>Nmap XML Output DTD</A
></DT
><DD
><DL
><DT
><A
HREF="app-nmap-dtd.html#AEN4302"
></A
></DT
></DL
></DD
><DT
>B. <A
HREF="complementary-tools.html"
>Appendix A: Complementary Tools</A
></DT
></DL
></DIV
><DIV
CLASS="LOT"
><DL
CLASS="LOT"
><DT
><B
>List of Tables</B
></DT
><DT
>2-1. <A
HREF="install-zaurus-pda.html#AEN868"
>The Sharp Zaurus is an excellent platform for highly mobile
 security applications</A
></DT
><DT
>3-1. <A
HREF="host-enumeration-strategies.html#host-enumeration-tbl-popular-tcp-p
orts"
>Valuable TCP
probe ports, in descending order of accessibility.</A
></DT
><DT
>5-1. <A
HREF="scan-methods.html#scan-methods-tbl-icmp-unreachable-codes"
>ICMP destination unreachable (type 3) code values</A
></DT
><DT
>5-2. <A
HREF="scan-methods-syn-scan.html#scan-methods-tbl-syn-scan-responses"
>How Nmap interprets responses to a SYN probe</A
></DT
><DT
>5-3. <A
HREF="scan-methods-udp-scan.html#scan-methods-tbl-udp-scan-responses"
>How Nmap interprets responses to a UDP probe</A
></DT
><DT
>5-4. <A
HREF="scan-methods-null-fin-xmas-scan.html#scan-methods-tbl-nullfinxmas-s
can-responses"
>How Nmap interprets responses to a Null, FIN, or Xmas scan probe</A
></DT
><DT
>5-5. <A
HREF="scan-methods-ack-scan.html#scan-methods-tbl-ack-scan-responses"
>How Nmap interprets responses to an ACK scan probe</A
></DT
><DT
>5-6. <A
HREF="scan-methods-window-scan.html#scan-methods-tbl-window-scan-response
s"
>How Nmap interprets responses to a Window scan ACK probe</A
></DT
><DT
>5-7. <A
HREF="scan-methods-maimon-scan.html#scan-methods-tbl-maimon-scan-response
s"
>How Nmap interprets responses to a Maimon scan probe</A
></DT
><DT
>5-8. <A
HREF="scan-methods-ip-protocol-scan.html#scan-methods-tbl-protocol-scan-r
esponses"
>How Nmap interprets responses to an IP protocol probe</A
></DT
></DL
></DIV
><DIV
CLASS="LOT"
><DL
CLASS="LOT"
><DT
><B
>List of Figures</B
></DT
><DT
>1-1. <A
HREF="nmap-overview-and-demos.html#AEN183"
>Trinity begins her assault</A
></DT
><DT
>1-2. <A
HREF="nmap-overview-and-demos.html#AEN197"
>Trinity Scans the Matrix</A
></DT
><DT
>1-3. <A
HREF="nmap-overview-and-demos.html#AEN202"
>Terminal-view of the hack</A
></DT
><DT
>1-4. <A
HREF="legal-issues.html#AEN248"
>Strong opinions on port scanning legality and morality</A
></DT
><DT
>2-1. <A
HREF="nmap-install.html#fig-nmapfe-demo"
>NmapFE presents a simple graphical interface to Nmap</A
></DT
><DT
>2-2. <A
HREF="install-windows.html#fig-windows-cmdshell-exec"
>Executing Nmap from a Windows command shell</A
></DT
><DT
>2-3. <A
HREF="install-windows.html#fig-nmapwin-demo"
>NmapWin provides a slick Windows interface to Nmap</A
></DT
><DT
>2-4. <A
HREF="install-zaurus-pda.html#fig-nmap-install-zaurus-slc760"
>The Sharp Zaurus SL-C760 PDA</A
></DT
><DT
>2-5. <A
HREF="install-zaurus-pda.html#fig-nmap-install-zaurus-slc760-running-nmap
"
>The SL-C760 executing Nmap in a terminal window</A
></DT
><DT
>4-1. <A
HREF="port-scanning.html#fig-ip-header"
>IPv4 Header Layout</A
></DT
><DT
>4-2. <A
HREF="port-scanning.html#fig-tcp-header"
>TCP Header Layout</A
></DT
><DT
>4-3. <A
HREF="port-scanning.html#fig-udp-header"
>UDP Header Layout</A
></DT
><DT
>5-1. <A
HREF="scan-methods.html#scan-methods-fig-icmp-unreachable-header"
>ICMPv4 Destination Unreachable Header Layout</A
></DT
><DT
>5-2. <A
HREF="scan-methods-syn-scan.html#scan-methods-fig-syn-scan-open"
>SYN scan of open port 22</A
></DT
><DT
>5-3. <A
HREF="scan-methods-syn-scan.html#scan-methods-fig-syn-scan-closed"
>SYN scan of closed port 113</A
></DT
><DT
>5-4. <A
HREF="scan-methods-syn-scan.html#scan-methods-fig-syn-scan-filtered"
>SYN scan of filtered port 139</A
></DT
><DT
>5-5. <A
HREF="scan-methods-connect-scan.html#scan-methods-fig-connect-scan-open"
>Connect scan of open port 22 (<B
CLASS="command"
>nmap -sT -p22 scanme.nmap.org</B
>)</A
></DT
><DT
>5-6. <A
HREF="scan-methods-idle-scan.html#scan-methods-fig-idle-scan"
>Idle Scan Technique (Simplified)</A
></DT
><DT
>9-1. <A
HREF="subvert-ids.html#fig-blackice-your-mother"
>BlackIce discovers an unusual intruder</A
></DT
><DT
>9-2. <A
HREF="subvert-ids.html#fig-blackice-decoys"
>An attacker masked by dozens of decoys</A
></DT
><DT
>11-1. <A
HREF="output-formats-xml-output.html#output-formats-fig-xml-browser"
>Reading XML in a web browser</A
></DT
></DL
></DIV
><DIV
CLASS="LOT"
><DL
CLASS="LOT"
><DT
><B
>List of Examples</B
></DT
><DT
>1-1. <A
HREF="nmap-overview-and-demos.html#ex-felix-list-scan"
>Nmap list scan against Avatar Online IP addresses</A
></DT
><DT
>1-2. <A
HREF="nmap-overview-and-demos.html#ex-felix-scan1"
>Nmap results against an AO firewall</A
></DT
><DT
>1-3. <A
HREF="nmap-overview-and-demos.html#ex-felix-scan2"
>Another interesting AO machine</A
></DT
><DT
>1-4. <A
HREF="nmap-overview-and-demos.html#ex-madhat-nmap-diff"
>Nmap-diff typical output</A
></DT
><DT
>1-5. <A
HREF="nmap-overview-and-demos.html#ex-madhat-nmap-report"
>Nmap-report execution</A
></DT
><DT
>2-1. <A
HREF="nmap-install.html#ex-checking-for-nmap"
>Checking for Nmap and determining its version number</A
></DT
><DT
>2-2. <A
HREF="nmap-install.html#ex-verify-nmap-checksum"
>Verifying the Nmap download checksum</A
></DT
><DT
>2-3. <A
HREF="install-linux.html#ex-nmap-install-from-rpms"
>Installing Nmap from binary RPMs</A
></DT
><DT
>2-4. <A
HREF="install-linux.html#ex-nmap-install-from-srpms"
>Building and installing Nmap from source RPMs</A
></DT
><DT
>3-1. <A
HREF="host-enumeration-controls.html#host-enumeration-ex-listscan"
>Enumerating hosts surrounding WWW.Stanford.Edu with list scan</A
></DT
><DT
>3-2. <A
HREF="host-enumeration-techniques.html#host-enumeration-ex-ping2"
>Attempts to ping popular
Internet hosts</A
></DT
><DT
>3-3. <A
HREF="host-enumeration-techniques.html#host-enumeration-ex-synping"
>Retry Host Enumeration using port 80 SYN probes</A
></DT
><DT
>3-4. <A
HREF="host-enumeration-techniques.html#host-enumeration-ex-msackping"
>Attempted ACK ping against Microsoft</A
></DT
><DT
>3-5. <A
HREF="host-enumeration-strategies.html#host-enumeration-ex-defaultrandomp
ing"
>Generating 50,000 IP Addresses, then ping scanning with default 
options</A
></DT
><DT
>3-6. <A
HREF="host-enumeration-strategies.html#host-enumeration-ex-extensiverando
mping"
>Repeating
ping scan with extra probes</A
></DT
><DT
>4-1. <A
HREF="port-scanning.html#port-scanning-change-ephemeral-range"
>Viewing and increasing the ephemeral port range on Linux</A
></DT
><DT
>4-2. <A
HREF="port-scanning-tutorial.html#port-scanning-tutorial-nmap1"
>Simple scan: nmap scanme.nmap.org</A
></DT
><DT
>4-3. <A
HREF="port-scanning-tutorial.html#port-scanning-tutorial-nmap2"
>More complex: nmap -p0- -v -A -T4 scanme.nmap.org</A
></DT
><DT
>4-4. <A
HREF="port-scanning-ipv6.html#port-scanning-ex-ipv6"
>A simple IPv6 scan</A
></DT
><DT
>4-5. <A
HREF="recipe-find-open-port.html#port-scanning-ex-whois-playboy"
>Discovering Playboy's IP space</A
></DT
><DT
>4-6. <A
HREF="recipe-find-open-port.html#port-scanning-ex-www-playboy-ping"
>Pinging Playboy's Web Server for a Latency Estimate</A
></DT
><DT
>4-7. <A
HREF="recipe-find-open-port.html#port-scanning-ex-www-playboy-dig"
>Digging through Playboy's DNS records</A
></DT
><DT
>4-8. <A
HREF="recipe-find-open-port.html#port-scanning-ex-www-playboy-mxping"
>Pinging the MX servers</A
></DT
><DT
>4-9. <A
HREF="recipe-find-open-port.html#port-scanning-ex-playboy-mxping-tcp"
>TCP Pinging the MX servers</A
></DT
><DT
>4-10. <A
HREF="recipe-find-open-port.html#port-scanning-ex-playboy-port80-scan"
>Launching the scan</A
></DT
><DT
>4-11. <A
HREF="recipe-find-open-port.html#port-scanning-ex-playboy-port80-grep"
>Egrep for open ports</A
></DT
><DT
>5-1. <A
HREF="scan-methods-syn-scan.html#scan-methods-ex-syn-scan"
>A SYN Scan showing three port states</A
></DT
><DT
>5-2. <A
HREF="scan-methods-syn-scan.html#scan-methods-ex-synscan-packettrace"
>Using <TT
CLASS="option"
>--packet_trace</TT
> to understand a SYN scan</A
></DT
><DT
>5-3. <A
HREF="scan-methods-connect-scan.html#scan-methods-ex-connectscan-scanme"
>Connect scan example</A
></DT
><DT
>5-4. <A
HREF="scan-methods-udp-scan.html#scan-methods-ex-udpscan-felix"
>UDP scan example</A
></DT
><DT
>5-5. <A
HREF="scan-methods-udp-scan.html#scan-methods-ex-udpscan-scanme"
>UDP scan example</A
></DT
><DT
>5-6. <A
HREF="scan-methods-udp-scan.html#scan-methods-ex-udpscan-felix2"
>Improving Felix's UDP scan results with version detection</A
></DT
><DT
>5-7. <A
HREF="scan-methods-udp-scan.html#scan-methods-ex-udpscan-scanme2"
>Improving Scanme's UDP scan results with version detection</A
></DT
><DT
>5-8. <A
HREF="scan-methods-udp-scan.html#scan-methods-ex-rtt-trick"
>Attempting to disambiguate UDP ports with TTL discrepancies</A
></DT
><DT
>5-9. <A
HREF="scan-methods-null-fin-xmas-scan.html#scan-methods-ex-fin-xmas-scan"

>Example FIN and Xmas scans</A
></DT
><DT
>5-10. <A
HREF="scan-methods-null-fin-xmas-scan.html#scan-methods-ex-sco-syn-scan"
>SYN scan of docsrv.caldera.com</A
></DT
><DT
>5-11. <A
HREF="scan-methods-null-fin-xmas-scan.html#scan-methods-ex-sco-fin-scan"
>FIN scan of docsrv.caldera.com</A
></DT
><DT
>5-12. <A
HREF="scan-methods-custom-scanflags.html#scan-methods-ex-custom-synfin-sc
an"
>A SYN/FIN scan of Google</A
></DT
><DT
>5-13. <A
HREF="scan-methods-custom-scanflags.html#scan-methods-ex-custom-psh-scan"

>A custom PSH scan</A
></DT
><DT
>5-14. <A
HREF="scan-methods-ack-scan.html#scan-methods-ex-ack-scan"
>A Typical ACK Scan</A
></DT
><DT
>5-15. <A
HREF="scan-methods-ack-scan.html#scan-methods-ex-sco-ack-scan"
>An ACK scan of Docsrv</A
></DT
><DT
>5-16. <A
HREF="scan-methods-window-scan.html#scan-methods-ex-sco-window-scan"
>Window scan of docsrv.caldera.com</A
></DT
><DT
>5-17. <A
HREF="scan-methods-maimon-scan.html#scan-methods-ex-maimon-scan"
>A failed Maimon scan</A
></DT
><DT
>5-18. <A
HREF="scan-methods-idle-scan.html#scan-methods-ex-idle-scan"
>An Idle scan against the RIAA</A
></DT
><DT
>5-19. <A
HREF="scan-methods-idle-scan.html#scan-methods-ex-ipid-trace"
>IPID scan packet trace</A
></DT
><DT
>5-20. <A
HREF="scan-methods-ip-protocol-scan.html#scan-methods-ex-protocol-scanme"

>IP protocol scan of a router and a typical Linux 2.4 box</A
></DT
><DT
>5-21. <A
HREF="scan-methods-ftp-bounce-scan.html#scan-methods-ex-ftp-bounce-fixed"

>Attempting an FTP bounce scan</A
></DT
><DT
>5-22. <A
HREF="scan-methods-ftp-bounce-scan.html#scan-methods-ftp-bounce-working"
>Successful FTP bounce scan</A
></DT
><DT
>7-1. <A
HREF="version-scan.html#ex-version-detection-scan1"
>Simple usage of version detection</A
></DT
><DT
>7-2. <A
HREF="version-scan-examples.html#ex-version-detection-scan2"
>Version detection against WWW.Microsoft.Com</A
></DT
><DT
>7-3. <A
HREF="version-scan-examples.html#ex-version-detection-scan3"
>Complex version detection</A
></DT
><DT
>7-4. <A
HREF="version-scan-technique-demo.html#ex-version-detection-trace"
>Detailed trace of version detection</A
></DT
><DT
>7-5. <A
HREF="version-scan-post-processors.html#ex-version-detection-rpcinfo"
>Enumerating RPC services with rpcinfo</A
></DT
><DT
>7-6. <A
HREF="version-scan-post-processors.html#ex-version-detection-rpcscan"
><SPAN
CLASS="application"
>Nmap</SPAN
> direct RPC scan</A
></DT
><DT
>7-7. <A
HREF="version-scan-post-processors.html#ex-version-detection-ssl"
>Version scanning through SSL</A
></DT
><DT
>9-1. <A
HREF="determining-firewall-rules.html#defeating-firewalls-ids-standardsyn
"
>Detection of closed and filtered TCP ports</A
></DT
><DT
>9-2. <A
HREF="determining-firewall-rules.html#defeating-firewalls-ids-ackscan-sca
nme"
>ACK scan against Scanme</A
></DT
><DT
>9-3. <A
HREF="determining-firewall-rules.html#defeating-firewalls-ids-scans-para"

>Contrasting SYN and ACK scans against Para</A
></DT
><DT
>9-4. <A
HREF="determining-firewall-rules.html#defeating-firewalls-udp-scan"
>UDP scan against firewalled host</A
></DT
><DT
>9-5. <A
HREF="determining-firewall-rules.html#defeating-firewalls-udp-version-sca
n"
>UDP version scan against firewalled host</A
></DT
><DT
>9-6. <A
HREF="firewall-subversion.html#defeating-firewalls-fin-scan"
>FIN scan against stateless firewall</A
></DT
><DT
>9-7. <A
HREF="firewall-subversion.html#defeating-firewalls-sourceport88"
>Bypassing Windows IPsec filter using source port 88</A
></DT
><DT
>9-8. <A
HREF="firewall-subversion.html#defeating-firewalls-ex-ipv6"
>Comparing IPv4 and IPv6 scans</A
></DT
><DT
>9-9. <A
HREF="firewall-subversion.html#defeating-firewalls-ftpbounce-working"
>Exploiting
a printer with the FTP bounce scan</A
></DT
><DT
>9-10. <A
HREF="subvert-ids.html#defeating-ids-bugzilla-secfocus"
>Host names can be deceiving</A
></DT
><DT
>9-11. <A
HREF="subvert-ids.html#ex-traceroute-jump"
>Noting TTL gaps with traceroute</A
></DT
><DT
>9-12. <A
HREF="subvert-ids.html#defeating-ids-slow-nmap-scan"
>Slow scan to
bypass the default Snort 2.2.0 Flow-portscan fixed time scan detection
method</A
></DT
><DT
>9-13. <A
HREF="subvert-ids.html#defeating-ids-snortrules"
>Default Snort rules referencing Nmap</A
></DT
><DT
>9-14. <A
HREF="firewall-ids-packet-forgery.html#defeating-firewalls-ids-customtrac
eroute"
>Detection of closed and filtered TCP ports</A
></DT
><DT
>9-15. <A
HREF="firewall-ids-packet-forgery.html#defeating-firewalls-ids-ipid-ms"
>Testing IPID sequence number consistency</A
></DT
><DT
>10-1. <A
HREF="nmap-defenses-trickery.html#ex-defending-against-nmap-obscureports"

>An all-tcp-port version scan</A
></DT
><DT
>10-2. <A
HREF="nmap-defenses-trickery.html#ex-defending-against-nmap-ippersonality
"
>Deceiving Nmap with IP Personality</A
></DT
><DT
>11-1. <A
HREF="output-formats.html#output-formats-ex-scanrand"
>Scanrand output against a local network</A
></DT
><DT
>11-2. <A
HREF="output-formats-commandline-flags.html#output-formats-ex-grep-verbos
e"
>Greping for verbosity conditionals</A
></DT
><DT
>11-3. <A
HREF="output-formats-commandline-flags.html#output-formats-ex-verbose"
>A comparison of interactive output with and without verbosity 
enabled.</A
></DT
><DT
>11-4. <A
HREF="output-formats-commandline-flags.html#output-formats-ex-sample-debu
gging"
>Some representative debugging lines</A
></DT
><DT
>11-5. <A
HREF="output-formats-commandline-flags.html#output-formats-ex-packettrace
"
>Using <TT
CLASS="option"
>--packet_trace</TT
> to detail a ping scan of Scanme</A
></DT
><DT
>11-6. <A
HREF="output-formats-normal-output.html#output-formats-ex-normal"
>A typical example of normal output</A
></DT
><DT
>11-7. <A
HREF="output-formats-script-kiddie.html#output-formats-ex-script-kiddie"
>A typical example of $crIpt KiDDi3 0utPut</A
></DT
><DT
>11-8. <A
HREF="output-formats-xml-output.html#output-formats-xml"
>An example of Nmap XML output</A
></DT
><DT
>11-9. <A
HREF="output-formats-xml-output.html#output-formats-xml-port-elements"
>Nmap XML port elements</A
></DT
><DT
>11-10. <A
HREF="output-formats-xml-with-perl.html#output-formats-ex-nmap-parser"
>Nmap::Parser sample code</A
></DT
><DT
>11-11. <A
HREF="output-formats-xml-with-perl.html#output-formats-ex-nmap-scanner"
>Nmap::Scanner sample code</A
></DT
><DT
>11-12. <A
HREF="output-formats-grepable-output.html#output-formats-ex-grepable-scan
me"
>A typical example of grepable output</A
></DT
><DT
>11-13. <A
HREF="output-formats-grepable-output.html#output-formats-ex-grepable-prot
ocol-scanme"
>Grepable output for IP protocol scan</A
></DT
><DT
>11-14. <A
HREF="output-formats-grepable-output.html#output-formats-ex-grepable-ping
scan"
>Ping scan grepable output</A
></DT
><DT
>11-15. <A
HREF="output-formats-grepable-output.html#output-formats-ex-grepable-list
scan"
>List scan grepable output</A
></DT
><DT
>11-16. <A
HREF="output-formats-grepable-output.html#output-formats-ex-grepable-comm
andline"
>Parsing grepable output on the command line</A
></DT
><DT
>12-1. <A
HREF="nmap-services.html#data-files-nmap-services-file"
>Excerpt from <TT
CLASS="filename"
>nmap-services</TT
></A
></DT
><DT
>12-2. <A
HREF="nmap-service-probes.html#data-files-nmap-service-probes-file"
>Excerpt from <TT
CLASS="filename"
>nmap-service-probes</TT
></A
></DT
><DT
>12-3. <A
HREF="nmap-rpc.html#data-files-nmap-rpc-file"
>Excerpt from <TT
CLASS="filename"
>nmap-rpc</TT
></A
></DT
><DT
>12-4. <A
HREF="nmap-os-fingerprints.html#data-files-nmap-os-fingerprints-file"
>Excerpt from <TT
CLASS="filename"
>nmap-os-fingerprints</TT
></A
></DT
><DT
>12-5. <A
HREF="nmap-mac-prefixes.html#data-files-nmap-mac-prefixes-file"
>Excerpt from <TT
CLASS="filename"
>nmap-mac-prefixes</TT
></A
></DT
><DT
>12-6. <A
HREF="nmap-protocols.html#data-files-nmap-protocols-file"
>Excerpt from <TT
CLASS="filename"
>nmap-protocols</TT
></A
></DT
></DL
></DIV
></DIV
><DIV
CLASS="NAVFOOTER"
><HR
ALIGN="LEFT"
WIDTH="100%"><TABLE
SUMMARY="Footer navigation table"
WIDTH="100%"
BORDER="0"
CELLPADDING="0"
CELLSPACING="0"
><TR
><TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
>&nbsp;</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
>&nbsp;</TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
><A
HREF="preface.html"
ACCESSKEY="N"
><IMG
SRC="../book-icons/next.gif"
BORDER="0"
ALT="Next"></A
></TD
></TR
><TR
><TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
>&nbsp;</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
>&nbsp;</TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
>Preface</TD
></TR
></TABLE
></DIV
><!--#include virtual="/templates/standard_body_bottom.html" --></BODY
></HTML
>