root@kali:~# strace -t -e trace=network nmap -sP 192.168.0.218
Starting Nmap 7.80 ( https://nmap.org ) at 2019-12-16 21:07 MSK
21:07:37 socket(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 4
21:07:37 connect(4, {sa_family=AF_UNIX, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
21:07:37 socket(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 4
21:07:37 connect(4, {sa_family=AF_UNIX, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
21:07:37 socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4
21:07:37 bind(4, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 0
21:07:37 sendmsg(4, {msg_name={sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, msg_namelen=12, msg_iov=[{iov_base={{len=36, type=RTM_GETROUTE, flags=NLM_F_REQUEST, seq=0, pid=0}, {rtm_family=AF_INET, rtm_dst_len=32, rtm_src_len=0, rtm_tos=0, rtm_table=RT_TABLE_UNSPEC, rtm_protocol=RTPROT_UNSPEC, rtm_scope=RT_SCOPE_UNIVERSE, rtm_type=RTN_UNSPEC, rtm_flags=0}, {{nla_len=8, nla_type=RTA_DST}, inet_addr("192.168.0.218")}}, iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 36
21:07:37 recvmsg(4, {msg_name={sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, msg_namelen=12, msg_iov=[{iov_base={{len=112, type=RTM_NEWROUTE, flags=0, seq=0, pid=4395}, {rtm_family=AF_INET, rtm_dst_len=32, rtm_src_len=0, rtm_tos=0, rtm_table=RT_TABLE_MAIN, rtm_protocol=RTPROT_UNSPEC, rtm_scope=RT_SCOPE_UNIVERSE, rtm_type=RTN_UNICAST, rtm_flags=RTM_F_CLONED}, [{{nla_len=8, nla_type=RTA_TABLE}, RT_TABLE_MAIN}, {{nla_len=8, nla_type=RTA_DST}, inet_addr("192.168.0.218")}, {{nla_len=8, nla_type=RTA_OIF}, if_nametoindex("eth0")}, {{nla_len=8, nla_type=RTA_PREFSRC}, inet_addr("192.168.65.131")}, {{nla_len=8, nla_type=RTA_GATEWAY}, inet_addr("192.168.65.2")}, {{nla_len=8, nla_type=RTA_UID}, 0}, {{nla_len=36, nla_type=RTA_CACHEINFO}, {rta_clntref=2, rta_lastuse=78, rta_expires=0, rta_error=0, rta_used=0, rta_id=0, rta_ts=0, rta_tsage=0}}]}, iov_len=512}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 112
21:07:37 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
21:07:37 socket(AF_INET, SOCK_DGRAM, IPPROTO_IP) = 4
21:07:37 setsockopt(4, SOL_SOCKET, SO_BROADCAST, [1], 4) = 0
21:07:37 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 6
21:07:37 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 6
21:07:37 socket(AF_INET, SOCK_RAW, IPPROTO_RAW) = 4
21:07:37 setsockopt(4, SOL_SOCKET, SO_BROADCAST, [1], 4) = 0
21:07:37 setsockopt(4, SOL_IP, IP_HDRINCL, [1], 4) = 0
21:07:37 setsockopt(4, SOL_SOCKET, SO_BINDTODEVICE, [0], 4) = 0
21:07:37 socket(AF_INET, SOCK_DGRAM, IPPROTO_IP) = 5
21:07:37 socket(AF_PACKET, SOCK_RAW, htons(ETH_P_ALL)) = 5
21:07:37 bind(5, {sa_family=AF_PACKET, sll_protocol=htons(ETH_P_ALL), sll_ifindex=if_nametoindex("eth0"), sll_hatype=ARPHRD_NETROM, sll_pkttype=PACKET_HOST, sll_halen=0}, 20) = 0
21:07:37 getsockopt(5, SOL_SOCKET, SO_ERROR, [0], [4]) = 0
21:07:37 setsockopt(5, SOL_PACKET, PACKET_AUXDATA, [1], 4) = 0
21:07:37 getsockopt(5, SOL_SOCKET, SO_BPF_EXTENSIONS, [64], [4]) = 0
21:07:37 getsockopt(5, SOL_PACKET, PACKET_HDRLEN, [32], [4]) = 0
21:07:37 setsockopt(5, SOL_PACKET, PACKET_VERSION, [1], 4) = 0
21:07:37 setsockopt(5, SOL_PACKET, PACKET_RESERVE, [4], 4) = 0
21:07:37 getsockopt(5, SOL_SOCKET, SO_TYPE, [3], [4]) = 0
21:07:37 getsockopt(5, SOL_PACKET, PACKET_RESERVE, [4], [4]) = 0
21:07:37 setsockopt(5, SOL_PACKET, PACKET_RX_RING, {tp_block_size=4096, tp_block_nr=520, tp_frame_size=336, tp_frame_nr=6240}, 16) = 0
21:07:37 setsockopt(5, SOL_SOCKET, SO_ATTACH_FILTER, {len=1, filter=0x55a33e341518}, 16) = 0
21:07:37 recvfrom(5, 0x7fffc7c67897, 1, MSG_TRUNC, NULL, NULL) = -1 EAGAIN (Resource temporarily unavailable)
21:07:37 setsockopt(5, SOL_SOCKET, SO_ATTACH_FILTER, {len=13, filter=0x55a33e3ff200}, 16) = 0
21:07:37 sendto(4, "E\0\0\34\360\321\0\0'\1\337a\300\250A\203\300\250\0\332\10\0\205\257rP\0\0", 28, 0, {sa_family=AF_INET, sin_port=htons(0), sin_addr=inet_addr("192.168.0.218")}, 16) = 28
21:07:37 sendto(4, "E\0\0,\230\342\0\0002\6,<\300\250A\203\300\250\0\332\226\352\1\273\226w\226n\0\0\0\0"..., 44, 0, {sa_family=AF_INET, sin_port=htons(443), sin_addr=inet_addr("192.168.0.218")}, 16) = 44
21:07:37 sendto(4, "E\0\0(y\r\0\08\6F\25\300\250A\203\300\250\0\332\226\352\0P\0\0\0\0\226w\226n"..., 40, 0, {sa_family=AF_INET, sin_port=htons(80), sin_addr=inet_addr("192.168.0.218")}, 16) = 40
21:07:37 sendto(4, "E\0\0(\361\276\0\0001\1\324h\300\250A\203\300\250\0\332\r\0\27\7\333\370\0\0\0\0\0\0"..., 40, 0, {sa_family=AF_INET, sin_port=htons(0), sin_addr=inet_addr("192.168.0.218")}, 16) = 40
21:07:37 setsockopt(5, SOL_PACKET, PACKET_RX_RING, {tp_block_size=0, tp_block_nr=0, tp_frame_size=0, tp_frame_nr=0}, 16) = -1 EBUSY (Device or resource busy)
21:07:37 socket(AF_INET, SOCK_DGRAM, IPPROTO_UDP) = 5
21:07:37 setsockopt(5, SOL_SOCKET, SO_BINDTODEVICE, [0], 4) = 0
21:07:37 connect(5, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("192.168.65.2")}, 16) = 0
21:07:37 getsockopt(5, SOL_SOCKET, SO_ERROR, [0], [4]) = 0
21:07:37 sendto(5, "\310\370\1\0\0\1\0\0\0\0\0\0\003218\0010\003168\003192\7in-ad"..., 44, 0, NULL, 0) = 44
21:07:38 recvfrom(5, "\310\370\201\204\0\1\0\0\0\0\0\0\003218\0010\003168\003192\7in-ad"..., 8192, 0, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("192.168.65.2")}, [128->16]) = 44
21:07:41 sendto(5, "\310\371\1\0\0\1\0\0\0\0\0\0\003218\0010\003168\003192\7in-ad"..., 44, 0, NULL, 0) = 44
21:07:41 recvfrom(5, "\310\371\201\204\0\1\0\0\0\0\0\0\003218\0010\003168\003192\7in-ad"..., 8192, 0, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("192.168.65.2")}, [128->16]) = 44
21:07:45 sendto(5, "\310\372\1\0\0\1\0\0\0\0\0\0\003218\0010\003168\003192\7in-ad"..., 44, 0, NULL, 0) = 44
21:07:45 recvfrom(5, "\310\372\201\204\0\1\0\0\0\0\0\0\003218\0010\003168\003192\7in-ad"..., 8192, 0, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("192.168.65.2")}, [128->16]) = 44
Nmap scan report for 192.168.0.218
Host is up (0.00019s latency).
Nmap done: 1 IP address (1 host up) scanned in 13.15 seconds
21:07:50 +++ exited with 0 +++