|
|
Home
|
Using Zenmap 5.0 on Ubuntu 9.04 |
|
|
|
Friday, 09 October 2009 |
|
Page 4 of 4
The Graphical Frontend
The Graphical frontend can be used to view Nmap’s normal output and to display all open ports and running services found. It summarizes details about a single host or a complete scan in a convenient display. Zenmap can even draw a topology map of discovered networks. The results of several scans may be combined together and viewed at once.
Zenmap has the ability to show the differences between two scans. You can see what changed between the same scan run on different days, between scans of two different hosts, between scans of the same hosts with different options, or any other combination. This allows administrators to easily track new hosts or services appearing on their networks, or existing ones going down. To save an individual scan to a file, choose “Save Scan” from the “Scan” menu (or use the keyboard shortcut ctrl+S). If there is more than one scan into the inventory you will be asked which one you want to save. Results are saved in Nmap XML format. You are also able to save all scans related to your environment in a directory. This will be extremely helpful if you have to test networks in different locations at the same time. You will be able to reread the scan result offline including the “Topology” Tab in the future if necessary.
The Zenmap's “Topology” tab provides an interactive, animated visualization of the connections between hosts on a network. Hosts are shown as nodes on a graph that extends radially from the center. The topology view is most useful when combined with Nmap's --traceroute option, because that's the option that discovers the network path to a host. The topology view is an adaptation of the RadialNet program by João Paulo S. Medeiros. It is network visualization tool developed for Umit during the Google Summer of Code 2007.
The topology view uses many symbols and color conventions. Each regular host in the network is represented by a little circle. The color and size of the circle is determined by the number of open ports on the host. The more open ports, the larger the circle. A white circle represents an intermediate host in a network path that was not port scanned. If a host has fewer than three open ports, it will be green; between three and six open ports, yellow; more than six open ports, red.
Connections between hosts are shown with colored lines. Primary trace route connections are shown with blue lines.
Some host may carry one or more icons describing what type of host (router, switch, wireless access point, firewall) are discovered.
Comparing Results
It is a from time to time necessary to scan netwoks twice at different times, or to run two slightly different scans at the same time, and see how they differ. In the past it was always difficult to compare them. Zenmap now provides an interface that helps comparing scan results. We just have to open the comparison tool by selecting “Compare Results” from the “Tools” menu or by using the ctrl+D (think “diff”) keyboard shortcut. Zenmap supports comparing two scan results at a time.
Files used by Zenmap
Zenmap uses a number of configuration and control files, and of course requires Nmap to be installed. Where the files are stored depends on the platform and how Zenmap was configured. The configuration files are divided into two categories: system files and per-user files.
The nmap system files are stored in the Ubuntu system here:
/usr/local/bin/nmap
The Zenmap files are store here:
/usr/local/bin/zenmap
The most important files are the “per-user-configuration” files. The files are stored in the directory <HOME>/.zenmap. If you are running zenmap as root you will find the files here:
/root/.zenmap/
Please take a look at them and understand at least the following:
recent_scans.txt
This contains a list of file names of recently saved scans. These scans are shown under the “Scan”
scan_profile.usp
This file contains descriptions of scan profiles, including the defaults and user-created profiles. It is recommended to use the profile editor, but you can copy the file to or from other scan machines if you like. See example here:
zenmap.conf
This is Zenmap's main configuration file. It holds the settings for a particular user's copy of Zenmap.
|
|
Who's Online
We have 36 guests online
Virus Info Feed
Alexa Traffic Stats
|
