5 ways the Linux nmap command can help keep your network secure

Comply with ZDNET: Add us as a preferred source on Google.

ZDNET’s key takeaways

• If it’s worthwhile to scan your community, nmap is the software to make use of.
• Nmap may be put in on any Linux distribution.
• Nmap has a number of very helpful instructions.

The nmap command (quick for community mapper) is a community exploration/safety auditing software that may quickly scan networks that will help you discover out what hosts can be found. With nmap, you may uncover open ports and providers, and even discover out what working techniques are in your community. 

I’ve used nmap to search out out what machines are on a community and what ports/providers are open. If I discover a port that should not be open, I can shut it to keep away from safety points.

Additionally: 5 reasons you should ditch Windows for Linux today

In different phrases, nmap is an important software for anybody who’s severe about their community safety. 

The factor is, nmap can do lots. The truth is, in case you had been to learn the guide web page (man nmap), you’d possible come away confused and intimidated. That is unlucky, as a result of nmap can are available very helpful.

To keep away from the confusion and intimidation, I am going to display a few of the extra useful things you are able to do with nmap. With out additional ado, open your terminal app and prepare to scan.

Putting in nmap

If nmap is not already put in in your Linux distribution, it is really fairly simple to do. This is how:

• Ubuntu/Debian-based distributions: sudo apt-get set up nmap -y
• Fedora-based distributions: sudo dnf set up nmap -y
• Arch-based distributions: sudo pacman -S nmap

1. Working system discovery

This is among the duties I continuously use with nmap as a result of I frequently must find which OS is related to an IP handle. As with many nmap instructions, this may be run on a single handle or a variety of addresses. The command for OS discovery on a single IP handle would look one thing like this:

nmap -A 192.168.1.176

Close to the underside of the outcomes, you must discover a line that appears like this:

Service Data: OS: Linux; CPE: cpe:/o:linux:linux_kernel

Now, you understand what OS is related to that IP handle.

If you wish to scan a variety of addresses to search out out which OS is related to each host in your community, the command would look one thing like this:

nmap -A 192.168.1.0/24

Remember the fact that scanning a whole port vary can take fairly a little bit of time (relying on the variety of machines connected to your LAN).

2. Listing open ports

Generally you simply must know what ports are open in your community. You may uncover that there are machines with open ports that should not be open. If that is the case, you’ll positively wish to shut them (or threat safety breaches). The factor about ports is that there are plenty of them (to the tune of 65,536). A lot of these ports aren’t frequently used, however you by no means know, which is why it is necessary to run a scan of ports in your LAN to see what’s what.

Additionally: The best Linux distros for beginners

To run a port scan on a single host with nmap, the command would look one thing like this:

nmap -p 0-65535 192.168.1.176

To run a port scan in your total LAN, the command would look one thing like this:

nmap -p 0-65535 192.168.1.0/24

You too can scan for a single port. Say, as an example, you wish to test and see if any host in your community has its SMTP port open. That scan could be:

nmap -p 25 192.168.1.0/24

3. Scan a whole community

In the event you simply wish to run a basic scan of your total community, you might use nmap like so:

nmap 192.168.1.*

You may even add extra output with the verbose flag, like this:

nmap -v 192.168.1.*

As a result of the above instructions are all-encompassing, they will take fairly a little bit of time to finish.

3. Scan a number of machines (however not a whole community)

As an instance you wish to scan for open ports on the machines 192.168.1.11, 192.168.1.12, 192.168.1.13, and 192.168.1.14. As a substitute of typing out all the handle for every, you may as a substitute use simply the final octets like so:

nmap -p 0-65535 192.168.1.11,12,13,14

You may additionally scan an handle vary like this:

nmap -p 0-65535 192.168.1.11-14

4. Detect firewalls

You may want to search out out if a bunch has a firewall working. Naturally, in case you discover a host with its firewall disabled, you must be sure that to allow it instantly. 

Additionally: Linux desktop frozen? My 5 go-to tricks to try – before forcing a hard reboot

To make use of nmap to find firewalls is a bit trickier than the opposite instructions, since you’ll not solely use a number of choices, but additionally ship the output to a file (for simpler viewing). The command would look one thing like this:

sudo nmap -sF -g 25 -oN fw.txt 192.168.1.11

Though nmap sends the output to the terminal, it additionally saves it to a file (within the above case, fw.txt). In the event you see “filtered” within the output, the firewall is up and working. In the event you see “ignored state(s),” meaning the firewall is disabled.

5. Uncover ‘stay’ hosts

You may also wish to establish which hosts in your LAN are at the moment on-line and responsive (as a substitute of hibernating and/or offline). To run this scan would appear like this:

nmap -sP 192.168.1.0/24

In the event you see “Host is up,” then you understand that the machine is stay.

These are the 5 nmap instructions I frequently run. Given how a lot nmap can do, I extremely advocate you learn by way of the nmap man web page (man nmap) to search out out all the pieces else the command has to supply.

Get the morning’s high tales in your inbox every day with our Tech Today newsletter.