CentOS6.3 x86_64 mininstall 安装扫描之王nmap 1,安装 [root@bogon ~]# yum -y install nmap Loaded plugins: fastestmirror, presto Loading mirror speeds from cached hostfile * base: mirrors.163.com * extras: mirrors.163.com * updates: mirrors.163.com base | 3.7 kB 00:00 extras | 3.5 kB 00:00 extras/primary_db | 8.9 kB 00:00 updates | 3.5 kB 00:00 updates/primary_db | 3.5 MB 00:16 Setting up Install Process Resolving Dependencies --> Running transaction check ---> Package nmap.x86_64 2:5.51-2.el6 will be installed --> Processing Dependency: libpcap.so.1()(64bit) for package: 2:nmap-5.51-2.el6.x86_64 --> Running transaction check ---> Package libpcap.x86_64 14:1.0.0-6.20091201git117cb5.el6 will be installed --> Finished Dependency Resolution Dependencies Resolved =============================================================================================== Package Arch Version Repository Size =============================================================================================== Installing: nmap x86_64 2:5.51-2.el6 base 2.7 M Installing for dependencies: libpcap x86_64 14:1.0.0-6.20091201git117cb5.el6 base 126 k Transaction Summary =============================================================================================== Install 2 Package(s) Total download size: 2.9 M Installed size: 10 M Downloading Packages: Setting up and reading Presto delta metadata Processing delta metadata Package(s) data still to download: 2.9 M (1/2): libpcap-1.0.0-6.20091201git117cb5.el6.x86_64.rpm | 126 kB 00:00 (2/2): nmap-5.51-2.el6.x86_64.rpm | 2.7 MB 00:06 ----------------------------------------------------------------------------------------------- Total 431 kB/s | 2.9 MB 00:06 Running rpm_check_debug Running Transaction Test Transaction Test Succeeded Running Transaction Installing : 14:libpcap-1.0.0-6.20091201git117cb5.el6.x86_64 1/2 Installing : 2:nmap-5.51-2.el6.x86_64 2/2 Verifying : 2:nmap-5.51-2.el6.x86_64 1/2 Verifying : 14:libpcap-1.0.0-6.20091201git117cb5.el6.x86_64 2/2 Installed: nmap.x86_64 2:5.51-2.el6 Dependency Installed: libpcap.x86_64 14:1.0.0-6.20091201git117cb5.el6 Complete! 2,查看libpcap(依赖),nmap的简介 [root@bogon ~]# rpm -qi libpcap Name : libpcap Relocations: (not relocatable) Version : 1.0.0 Vendor: CentOS Release : 6.20091201git117cb5.el6 Build Date: Fri 12 Nov 2010 03:46:56 AM CST Install Date: Wed 24 Oct 2012 06:47:46 AM CST Build Host: c6b6.bsys.dev.centos.org Group : Development/Libraries Source RPM: libpcap-1.0.0-6.20091201git117cb5.el6.src.rpm Size : 332194 License: BSD with advertising Signature : RSA/8, Sun 03 Jul 2011 12:37:49 PM CST, Key ID 0946fca2c105b9de Packager : CentOS BuildSystem <http://bugs.centos.org> URL : http://www.tcpdump.org Summary : A system-independent interface for user-level packet capture Description : Libpcap provides a portable framework for low-level network monitoring. Libpcap can provide network statistics collection, security monitoring and network debugging. Since almost every system vendor provides a different interface for packet capture, the libpcap authors created this system-independent API to ease in porting and to alleviate the need for several system-dependent packet capture modules in each application. [root@bogon ~]# rpm -qi nmap Name : nmap Relocations: (not relocatable) Version : 5.51 Vendor: CentOS Release : 2.el6 Build Date: Fri 22 Jun 2012 08:46:25 PM CST Install Date: Wed 24 Oct 2012 06:47:47 AM CST Build Host: c6b8.bsys.dev.centos.org Group : Applications/System Source RPM: nmap-5.51-2.el6.src.rpm Size : 10153050 License: GPLv2 and LGPLv2+ and GPLv2+ and BSD Signature : RSA/SHA1, Mon 25 Jun 2012 06:20:19 AM CST, Key ID 0946fca2c105b9de Packager : CentOS BuildSystem <http://bugs.centos.org> URL : http://nmap.org/ Summary : Network exploration tool and security scanner Description : Nmap is a utility for network exploration or security auditing. It supports ping scanning (determine which hosts are up), many port scanning techniques (determine what services the hosts are offering), and TCP/IP fingerprinting (remote host operating system identification). Nmap also offers flexible target and port specification, decoy scanning, determination of TCP sequence predictability characteristics, reverse-identd scanning, and more. In addition to the classic command-line nmap executable, the Nmap suite includes a flexible data transfer, redirection, and debugging tool (netcat utility ncat), a utility for comparing scan results (ndiff), and a packet generation and response analysis tool (nping). 3,测试 [root@bogon ~]# nmap www.baidu.com Starting Nmap 5.51 ( http://nmap.org ) at 2012-10-24 06:58 CST Nmap scan report for www.baidu.com (61.135.169.105) Host is up (0.13s latency). Other addresses for www.baidu.com (not scanned): 61.135.169.125 Not shown: 983 filtered ports PORT STATE SERVICE 25/tcp open smtp 80/tcp open http 81/tcp open hosts2-ns 82/tcp open xfer 110/tcp open pop3 119/tcp open nntp 143/tcp open imap 465/tcp open smtps 563/tcp open snews 587/tcp open submission 993/tcp open imaps 995/tcp open pop3s 3128/tcp open squid-http 8008/tcp open http 8080/tcp open http-proxy 8081/tcp open blackice-icecap 8888/tcp open sun-answerbook Nmap done: 1 IP address (1 host up) scanned in 219.51 seconds [root@bogon ~]# nmap www.google.com Starting Nmap 5.51 ( http://nmap.org ) at 2012-10-24 07:02 CST Nmap scan report for www.google.com (61.49.43.2) Host is up (0.023s latency). Not shown: 984 filtered ports PORT STATE SERVICE 22/tcp open ssh 25/tcp open smtp 80/tcp open http 82/tcp open xfer 110/tcp open pop3 119/tcp open nntp 143/tcp open imap 465/tcp open smtps 563/tcp open snews 587/tcp open submission 993/tcp open imaps 995/tcp open pop3s 3128/tcp open squid-http 8008/tcp open http 8080/tcp open http-proxy 8888/tcp open sun-answerbook Nmap done: 1 IP address (1 host up) scanned in 61.40 seconds 4,验证下测试结果,估计google的ssh密码非常强 [root@localhost ~]# telnet www.google.com 22 Trying 61.49.43.2... Connected to www.google.com (61.49.43.2). Escape character is '^]'. SSH-2.0-OpenSSH_5.3p1 Debian-3ubuntu7 Nmap tests the most common network communication ports for listening or waiting services. This knowledge can be helpful to an administrator who wants to close down unnecessary or unused services.