ARTICLE Nmap dev release 4.22SOC8 is out

Monday 29 October 2007 - 553 read - ( Keywords : Information Gathering , Network Discovery , Nmap )

Nmap ("Network Mapper") is a free open source utility for network exploration or security auditing. It was designed to rapidly scan large networks, although it works fine against single hosts. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics. Nmap runs on most types of computers and both console and graphical versions are available. Nmap is free and open source (license).

Changelog

- Removed the old massping() system, since the functionality has now been migrated into the existing ultra_scan() system (which is used for port scanning too). Thanks to David for doing the migration, which involved a lot of work and testing. The new system is frequently faster and more accurate than massping(), and some of the new algorithms benefit port scans too.

- Renamed Umit to Zenmap to reduce confusion between the version we ship with Nmap as the integrated GUI and the version maintained separately at umit.sourceforge.net. We are excited about Zenmap and expect to remove NmapFE in the near future

- Integrated all of your Q3 service detection submissions! We have now surpassed 4500 signatures and are approaching 500 service protocols. Wow! Thanks to Doug for doing the integration. His notes on the crazy and interesting services discovered this quarter are at http://hcsw.org/blog.pl/31 .

- Added a new ping type: IPProto Ping. Use -PO (that is the letter O as in prOtOcOl, not a zero). This is similar to protocol scan (-sO) in that it sends IP headers with different protocols in the hope of eliciting a response from targets. The default is to send with protocols 1 (ICMP), 2 (IGMP), and 4 (IP-in-IP tunnel), but you can specify different protocol numbers on the command line the same way you specify TCP/UDP ports to -PS or -PU. [Kris]

- The SMTPcommands.nse script was updated to support the HELP query in addition to EHLO [Jason DePriest]

- Added —ttl support for connect() scans (-sT). [Kris]

- Combine the Zenmap setup scripts into one portable setup.py rather than having separate versions for Windows, Unix, and Mac OS X.

- Removed a bunch of unnecessary/incomplete code and data files from Zenmap. [ David]

- In Nbase, switched from GNU’s getopt() replacement functions to Ben Sittler’s BSD-licensed (but GNU compatible) functions. [Kris]

- Include nmap.h in portreasons.h. This fixes a compilation problem reported on OpenBSD. [David]

- Change PCRE from an NSELib module back to statically linked code due to OpenBSD compilation problems. See http://seclists.org/nmap-dev/2007/q4/0085.html [David]

- Fix a problem with —reason printing the wrong host discovery reasons when ICMP destination unreachable packets arrived. [Kris]

- Nmap has better dependency tracking now such that it no longer builds the executable every time you type ’make’. This was causing problems where ’make; sudo make install’ would create a root-owned nmap executable because it was rebuilt as part of ’make install’. [David]


POSTSCRIPTUM

Download


COMPLIANCE MANDATES

Network Discovery : PCI DSS 11.2, SOX A13.3, GLBA 16CFR Part 314.4(c), HIPAA 164.308(a)(8), FISMA RA-5


RELATED ARTICLES

Information Gathering, Network Discovery, Nmap,

30 March 2010 : Nmap v5.30 beta 1 in the wild - doped with scripts -
20 January 2010 : Nmap v5.20 released
26 December 2009 : Nmap 5.10BETA2 released : Citrix scanning & xmas greetings
24 November 2009 : Nmap 5.10BETA1 released
16 July 2009 : Nmap & Zenmap v5.0 released