If you want quick but less reliable version detection, you can also use the - version-light command-line option, which is equal to a version intensity level of 2. Higher intensity scans take longer since they use more of the rare probes, but you are more likely to have services and versions correctly detected. Probes are classified with a rarity value between 1 and 9, with 1 being very common and highly useful, and 9 being rare and less useful. The intensity level controls the probes that are used in version detection the higher intensity means that more probes are used. By default, Nmap uses an intensity of 7 (out of 0–9). You can also control the version scanning intensity with the - version-intensity command-line option. To enable all ports for version detection, use the - allports command-line option. The nmap-service-probes file excludes probing certain ports (e.g., printer ports will print anything that is sent to it).

Nmap includes several command-line options to configure the version detection engine. Port State Version detection also attempts to gain more information about UDP and TCP ports that were reported as open|filtered to determine the correct state of the port. Miscellaneous Details Other details such as kernel information, serial numbers, firmware versions, user names, and password information. (This could be different than what the Nmap OS detection reports if the system uses network address translator (NAT) and forwarding for the application). Operating System Family The underlying OS such as Windows, HP-UX, Cisco IOS, or Linux. ■ĭevice Type The type of device such as a print server, media, router, WAP, or power device. (This may be for an internal network and different than the DNS response). Hostname The hostname of the target host. Version Number The version of the application. ■Īpplication Name The specific application for the service, such as WU-FTPD, Microsoft IIS, or Sendmail. Service Protocol The service running on the open port, such as FTP, Hypertext Transfer Protocol (HTTP), or Simple Mail Transfer Protocol (SMTP). Nmap will attempt to identify the following parameters: ■ Nmap queries the target host with the probe information and analyzes the response, comparing it against known responses for a variety of services, applications, and versions. Version detection uses a variety of probes, located in the nmap-services-probes file, to solicit responses from the services and applications. Nmap can perform version detection to assist in gathering more detail on the services and applications running on the identified open ports.

Zenmap intense scan