The problem that 65535 ports are fully open

[Ma1Dong]

The problem that 65535 ports are fully open is frequently encountered. Or thousands of ports open. If I want to skip the scan of the IP address if the number of ports exceeds 200, how should I solve this problem? Thank you.

[bhaveshraj336]

Can I try resolving these issue?

[bhaveshraj336]

@Ma1Dong I think you should give range of 200 ports at a time ?

[sell1ng]

Put a cap on the ports

[Ma1Dong]

@Ma1Dong I think you should give range of 200 ports at a time ?

I didn't express myself clearly，sorry。What I mean is When I scan the port of an IP，he result is that all ports on this IP are open，Obviously, this is caused by firewall policy，so，When I scan the addresses in bulk（nmap -iL ip.txt），I want to skip the IP in there，I can't use timeout，This may affect the results of other ip。

so，it is a good idea for me to skip the scan of an IP when the number of ports is greater than 200。What should I do，thank you！

For example，I need to scan 100 IP addresses，In the scan result, all ports of the 60th IP address are open. This IP address occupies a lot of scanning time。

The command I use is:
nmap -p- -sV -T4 -Pn -iL IP.txt -oN result.txt

[bhaveshraj336]

@Ma1Dong I think you should give range of 200 ports at a time ?

I didn't express myself clearly，sorry。What I mean is When I scan the port of an IP，he result is that all ports on this IP are open，Obviously, this is caused by firewall policy，so，When I scan the addresses in bulk（nmap -iL ip.txt），I want to skip the IP in there，I can't use timeout，This may affect the results of other ip。

so，it is a good idea for me to skip the scan of an IP when the number of ports is greater than 200。What should I do，thank you！

For example，I need to scan 100 IP addresses，In the scan result, all ports of the 60th IP address are open. This IP address occupies a lot of scanning time。

The command I use is:
nmap -p- -sV -T4 -Pn -iL IP.txt -oN result.txt

So I think we should add a -count option also

[Ma1Dong]

@Ma1Dong I think you should give range of 200 ports at a time ?

I didn't express myself clearly，sorry。What I mean is When I scan the port of an IP，he result is that all ports on this IP are open，Obviously, this is caused by firewall policy，so，When I scan the addresses in bulk（nmap -iL ip.txt），I want to skip the IP in there，I can't use timeout，This may affect the results of other ip。
so，it is a good idea for me to skip the scan of an IP when the number of ports is greater than 200。What should I do，thank you！
For example，I need to scan 100 IP addresses，In the scan result, all ports of the 60th IP address are open. This IP address occupies a lot of scanning time。
The command I use is:
nmap -p- -sV -T4 -Pn -iL IP.txt -oN result.txt

So I think we should add a -count option also

sorry，I don't understand what you mean，What I'm thinking is that when you have too many open ports, I want to skip this IP scan。Nmap does not provide this parameter。

[Ma1Dong]

@Ma1Dong I think you should give range of 200 ports at a time ?

I didn't express myself clearly，sorry。What I mean is When I scan the port of an IP，he result is that all ports on this IP are open，Obviously, this is caused by firewall policy，so，When I scan the addresses in bulk（nmap -iL ip.txt），I want to skip the IP in there，I can't use timeout，This may affect the results of other ip。
so，it is a good idea for me to skip the scan of an IP when the number of ports is greater than 200。What should I do，thank you！
For example，I need to scan 100 IP addresses，In the scan result, all ports of the 60th IP address are open. This IP address occupies a lot of scanning time。
The command I use is:
nmap -p- -sV -T4 -Pn -iL IP.txt -oN result.txt

So I think we should add a -count option also

sorry，I don't understand what you mean，What I'm thinking is that when you have too many open ports, I want to skip this IP scan。Nmap does not provide this parameter。
yes，You are correct。You can add a -count option，Defines a maximum number of ports，For example, the default is 200 ports，When the number of ports in an IP address exceeds this number，Skip this IP scan，This will greatly enhance the experience。

[bhaveshraj336]

@rewanthtammana @bonsaiviking @wongwaituck Hey could you let me know where I can do the changes ?

[duaa-abdelgadir]

@bhaveshraj336 https://seclists.org/nmap-dev/2014/q2/545 you can try this patch