Lab 2: Scanning Networks – Part I
Support your answer using screenshots
Student Name : Ahmed Alzahrani
Student ID : 441145751
Section No : 39580
Page 0 of 7
Note: always use " sudo " before each command to run it as a root user.
Run both your virtual machines Kali Linux and Windows 10. Add screenshot for each
result you got.
1. Simple scanning
a) Use ping to send a single packet to a host that responds to ping (screenshot).
b) Capture the ICMP traffic (the request and reply Echo) in Wireshark (screenshot).
Page 1 of 7
2. Use nMap from a terminal window in Kali Linux, Try a simple ping scan:
a) What is the host status?
UP
b) What is MAC Address?
00:0C:29:EA:6C:D8
c) Shutdown windows and repeat the command. What is the host status now?
Down.
Page 2 of 7
3. Start your Win 10 machine again, download ZenMap from the following link
(https://nmap.org/dist/nmap-7.92-setup.exe). Run ZenMap and perform a class C network
scan:
nmap -sn <subnet>/24 (e.g. nmap -sn 192.168.1.0/24)
Note the below screenshot, each response also shows the manufacturer’s details?
a) Regarding your scan result, navigate Hosts, Services, Nmap Output, Ports/Hosts,
Topology, Host Details and Scans; and take screenshots for each one.
Page 3 of 7
4. PING multiple devices? Note, use both Kali Linux IP and Win10 IP.
a) Are both hosts alive?
No
Page 4 of 7
b) What is fping command? fping is a program to send ICMP echo probes to network
hosts, similar to ping, but much better performing when pinging multiple hosts. fping
has a very long history: Roland Schemers did publish a first version of it in 1992 and it
has established itself since then as a standard tool for network diagnostics and statistics.
5. Scanning Windows hosts. From Kali Linux, run nbtscan command :
a) What the result you got?
Nothing
b) What is nbtscan tool?
NBTscan is an open source tool that has been used by state groups to conduct internal
reconnaissance within a compromised network. ID: S0590.
6. Hping3 Commands.
To scan ports from 130 to 450 on a host 192.168.1.1 use the command :
Page 5 of 7
a) How many ports are open?
b) What is a hping tool?
Hping is a TCP/IP packet assembler and analyzer. It receives IP data, de-packets that
data, and moves it to the linked device in the reverse order. It works on systems such as
Linus, Solaris, macOS, and Windows. While the tool is no longer in active development,
plenty of people download and access it each day.
c) Try 3 options used with hping command and notice the results (see the below table).
Page 6 of 7