On Wed, 2007-08-15 at 13:20 +0930, Tim wrote: > [tim@bigblack ~]$ nmap -v -p T:80,8081 pilotalk.com > ...[snip]... > Interesting ports on 75-104-20-115.cust.wildblue.net (75.104.20.115): > PORT STATE SERVICE > 80/tcp open http > 8081/tcp filtered blackice-icecap I forgot to include a comparison against something known. If I test against one of my own machines, starting and stopping my webserver, I get the following, with the server running: [tim@bigblack ~]$ nmap -A -p T:80 rover Starting Nmap 4.20 ( http://insecure.org ) at 2007-08-15 13:56 CST Interesting ports on rover.lan (192.168.1.9): PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.0.54 ((Fedora)) Notice that it could identify that I was running Apache. Versus, the server not running: [tim@bigblack ~]$ nmap -A -p T:80 rover Starting Nmap 4.20 ( http://insecure.org ) at 2007-08-15 13:54 CST Interesting ports on rover.lan (192.168.1.9): PORT STATE SERVICE VERSION 80/tcp closed http Now, if I'd had some peculiar networking, that allowed a connection through to something, but not to the webserver, it might be showing "open" or "filtered" as the state. NB: It can take a few seconds for the test to complete, unless it gets an instant closed response. Rover is the hostname of the test server. It's a bit of a dog, so it got named after one. ;-) -- [tim@bigblack ~]$ uname -ipr 2.6.22.1-41.fc7 i686 i386 Using FC 4, 5, 6 & 7, plus CentOS 5. Today, it's FC7. Don't send private replies to my address, the mailbox is ignored. I read messages from the public lists.
