CentOS6.3 x86_64 mininstall 安裝掃描之王nmap

CentOS6.3 x86_64 mininstall 安裝掃描之王nmap

1,安裝
[root@bogon ~]# yum -y install nmap
Loaded plugins: fastestmirror, presto
Loading mirror speeds from cached hostfile
 * base: mirrors.163.com
 * extras: mirrors.163.com
 * updates: mirrors.163.com
base                                                                    | 3.7 kB     00:00     
extras                                                                  | 3.5 kB     00:00     
extras/primary_db                                                       | 8.9 kB     00:00     
updates                                                                 | 3.5 kB     00:00     
updates/primary_db                                                      | 3.5 MB     00:16     
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package nmap.x86_64 2:5.51-2.el6 will be installed
--> Processing Dependency: libpcap.so.1()(64bit) for package: 2:nmap-5.51-2.el6.x86_64
--> Running transaction check
---> Package libpcap.x86_64 14:1.0.0-6.20091201git117cb5.el6 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

===============================================================================================
 Package         Arch           Version                                     Repository    Size
===============================================================================================
Installing:
 nmap            x86_64         2:5.51-2.el6                                base         2.7 M
Installing for dependencies:
 libpcap         x86_64         14:1.0.0-6.20091201git117cb5.el6            base         126 k

Transaction Summary
===============================================================================================
Install       2 Package(s)

Total download size: 2.9 M
Installed size: 10 M
Downloading Packages:
Setting up and reading Presto delta metadata
Processing delta metadata
Package(s) data still to download: 2.9 M
(1/2): libpcap-1.0.0-6.20091201git117cb5.el6.x86_64.rpm                 | 126 kB     00:00     
(2/2): nmap-5.51-2.el6.x86_64.rpm                                       | 2.7 MB     00:06     
-----------------------------------------------------------------------------------------------
Total                                                          431 kB/s | 2.9 MB     00:06     
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing : 14:libpcap-1.0.0-6.20091201git117cb5.el6.x86_64                             1/2
  Installing : 2:nmap-5.51-2.el6.x86_64                                                    2/2
  Verifying  : 2:nmap-5.51-2.el6.x86_64                                                    1/2
  Verifying  : 14:libpcap-1.0.0-6.20091201git117cb5.el6.x86_64                             2/2

Installed:
  nmap.x86_64 2:5.51-2.el6                                                                     

Dependency Installed:
  libpcap.x86_64 14:1.0.0-6.20091201git117cb5.el6                                              

Complete!

2，查看libpcap（依賴），nmap的簡介
[root@bogon ~]# rpm -qi libpcap
Name        : libpcap                      Relocations: (not relocatable)
Version     : 1.0.0                             Vendor: CentOS
Release     : 6.20091201git117cb5.el6       Build Date: Fri 12 Nov 2010 03:46:56 AM CST
Install Date: Wed 24 Oct 2012 06:47:46 AM CST      Build Host: c6b6.bsys.dev.centos.org
Group       : Development/Libraries         Source RPM: libpcap-1.0.0-6.20091201git117cb5.el6.src.rpm
Size        : 332194                           License: BSD with advertising
Signature   : RSA/8, Sun 03 Jul 2011 12:37:49 PM CST, Key ID 0946fca2c105b9de
Packager    : CentOS BuildSystem <http://bugs.centos.org>
URL         : http://www.tcpdump.org
Summary     : A system-independent interface for user-level packet capture
Description :
Libpcap provides a portable framework for low-level network
monitoring.  Libpcap can provide network statistics collection,
security monitoring and network debugging.  Since almost every system
vendor provides a different interface for packet capture, the libpcap
authors created this system-independent API to ease in porting and to
alleviate the need for several system-dependent packet capture modules
in each application.

[root@bogon ~]# rpm -qi nmap
Name        : nmap                         Relocations: (not relocatable)
Version     : 5.51                              Vendor: CentOS
Release     : 2.el6                         Build Date: Fri 22 Jun 2012 08:46:25 PM CST
Install Date: Wed 24 Oct 2012 06:47:47 AM CST      Build Host: c6b8.bsys.dev.centos.org
Group       : Applications/System           Source RPM: nmap-5.51-2.el6.src.rpm
Size        : 10153050                         License: GPLv2 and LGPLv2+ and GPLv2+ and BSD
Signature   : RSA/SHA1, Mon 25 Jun 2012 06:20:19 AM CST, Key ID 0946fca2c105b9de
Packager    : CentOS BuildSystem <http://bugs.centos.org>
URL         : http://nmap.org/
Summary     : Network exploration tool and security scanner
Description :
Nmap is a utility for network exploration or security auditing.  It supports
ping scanning (determine which hosts are up), many port scanning techniques
(determine what services the hosts are offering), and TCP/IP fingerprinting
(remote host operating system identification). Nmap also offers flexible target
and port specification, decoy scanning, determination of TCP sequence
predictability characteristics, reverse-identd scanning, and more. In addition
to the classic command-line nmap executable, the Nmap suite includes a flexible
data transfer, redirection, and debugging tool (netcat utility ncat), a utility
for comparing scan results (ndiff), and a packet generation and response analysis
tool (nping).

3，測試
[root@bogon ~]# nmap www.baidu.com

Starting Nmap 5.51 ( http://nmap.org ) at 2012-10-24 06:58 CST
Nmap scan report for www.baidu.com (61.135.169.105)
Host is up (0.13s latency).
Other addresses for www.baidu.com (not scanned): 61.135.169.125
Not shown: 983 filtered ports
PORT     STATE SERVICE
25/tcp   open  smtp
80/tcp   open  http
81/tcp   open  hosts2-ns
82/tcp   open  xfer
110/tcp  open  pop3
119/tcp  open  nntp
143/tcp  open  imap
465/tcp  open  smtps
563/tcp  open  snews
587/tcp  open  submission
993/tcp  open  imaps
995/tcp  open  pop3s
3128/tcp open  squid-http
8008/tcp open  http
8080/tcp open  http-proxy
8081/tcp open  blackice-icecap
8888/tcp open  sun-answerbook

Nmap done: 1 IP address (1 host up) scanned in 219.51 seconds

[root@bogon ~]# nmap www.google.com

Starting Nmap 5.51 ( http://nmap.org ) at 2012-10-24 07:02 CST
Nmap scan report for www.google.com (61.49.43.2)
Host is up (0.023s latency).
Not shown: 984 filtered ports
PORT     STATE SERVICE
22/tcp   open  ssh
25/tcp   open  smtp
80/tcp   open  http
82/tcp   open  xfer
110/tcp  open  pop3
119/tcp  open  nntp
143/tcp  open  imap
465/tcp  open  smtps
563/tcp  open  snews
587/tcp  open  submission
993/tcp  open  imaps
995/tcp  open  pop3s
3128/tcp open  squid-http
8008/tcp open  http
8080/tcp open  http-proxy
8888/tcp open  sun-answerbook

Nmap done: 1 IP address (1 host up) scanned in 61.40 seconds

4，驗證下測試結果，估計google的ssh密碼非常強
[root@localhost ~]# telnet www.google.com 22
Trying 61.49.43.2...
Connected to www.google.com (61.49.43.2).
Escape character is '^]'.
SSH-2.0-OpenSSH_5.3p1 Debian-3ubuntu7

Nmap tests the most common network communication ports for listening or waiting services. This knowledge can be helpful to an administrator who wants to close down unnecessary or unused services.