[Hack3rcon]

Hello,
In a local network, a device like the FortiGate existed and clients connecting to it for use the Internet. The traceroute output is:

Code:

$ sudo traceroute -4 google.com -I traceroute to google.com (216.239.38.120), 30 hops max, 60 byte packets 1 192.168.1.1 (192.168.1.1) 3.090 ms 3.412 ms 3.720 ms 2 two.two.two.two (2.0.0.2) 0.692 ms 0.796 ms 0.904 ms 3 192.168.1.200 (192.168.1.200) 0.202 ms 0.181 ms 0.169 ms ... 16 any-in-2678.1e100.net (216.239.38.120) 33.692 ms 33.689 ms 33.685 ms

I scanned 192.168.1.200 IP address with the Nmap, but it couldn't detect any open ports. How can I find the port that packets pass through it?

Thank you.

[User23]

Run nnamp with stealth scan and maybe with OS fingerprinting. Did you do a scan of the whole network? Were other devices detected?

[wdc]

What about Linux command "nmap -a ipaddress", but the remote must be your computer, otherwise it is illegal and can cause source IP blacklisting i think.
On the first page of the "man nmap" is an example command with explanation.

[mothered]

What about Linux command "nmap -a ipaddress", but the remote must be your computer, otherwise it is illegal and can cause source IP blacklisting i think.
On the first page of the "man nmap" is an example command with explanation.

NMap Is a very effective tool.

Obviously there are an array of other tools that serve the same purpose.

[gh05t3d]

By default it scan 1000 ports. Specify -p- so it will scan all ports

[rc445]

What do you mean "How can I find the port that packets pass through it?" . A firewall/router doesn't "accept" packets on a specific port. It routes (or doesn't route) all traffic based on rules.

The device will accept admin connections. Sometimes this is through a web UI or SSH. Sometimes, these devices wont accept admin connection through the LAN ports but will have a specific Management Port.
Most big organizations will segregate all their management traffic in a specific VLAN.

[The_Professor]

Best choice is Nmap stealth scan or if you want a user interface you can check out Fing