I am trying to learn a little about networking and I was hoping to get some help.
Does anyone know the difference between nmap and netstat?
I kind of know how to use them and how to check ports but I would like to know the differences too 🙂
The difference between nmap and netstat
netstatnmap
Related Solutions
What's the difference between -sS and -sT on nmap?
SCAN TYPES
-sS TCP SYN scan:
This technique is often referred to as "half-open" scanning, because you don’t open a full TCP connection. You send a SYN packet, as if you are going to open a real connection and you wait for a response. A SYN|ACK indicates the port is listen- ing. A RST is indicative of a non-listener. If a SYN|ACK is received, a RST is immediately sent to tear down the connection (actually our OS kernel does this for us). The primary advantage to this scanning technique is that fewer sites will log it. Unfortunately you need root privileges to build these custom SYN packets. This is the default scan type for privileged users.
-sT TCP connect() scan:
This is the most basic form of TCP scanning. The connect() system call provided by your operating system is used to open a connection to every interesting port on the machine. If the port is listening, connect() will succeed, oth erwise the port isn’t reachable. One strong advantage to this technique is that you don’t need any special privileges. Any user on most UNIX boxes is free to use this call.
This sort of scan is easily detectable as target host logs will show a bunch of connection and error messages for the services which accept() the connection just to have it immediately shut- down. This is the default scan type for unprivileged users.
Source nmap
You’re using the wrong command.
Use netstat -abn | more from an administrative command prompt and it will tell you what application attached to each port, one page at a time.
The -n will show IP addresses instead of hostnames like screenshots. Which, by the way, is probably your computer’s name.
The -b will show the application that owns the port.
Best Answer
Nmap is a Network mapping tool. That means it's used to discover informations about hosts on a network (their ip, open ports, etc). Whereas Netstat is a network statistic tool used to list active connections from and to your computer. See https://en.wikipedia.org/wiki/Netstat.