STEP 1: Command: sudo arp-scan -l -I eth0 IP ADDRESSES MAC 10.10.10.1 00:50:56:c0:00:05 (Unknown) 10.10.10.129 00:0c:29:de:d8:ca (Unknown) 10.10.10.134 00:0c:29:d2:7c:1d (Unknown) 10.10.10.254 00:50:56:fd:4b:ec (Unknown) STEP 2: For netcat scan, I used the command: nc -nvz -w 1 10.10.10.134 1-1024 to find the open port on IP: 10.10.10.134 (UNKNOWN) [10.10.10.134] 445 (microsoft-ds) open (UNKNOWN) [10.10.10.134] 139 (netbios-ssn) open (UNKNOWN) [10.10.10.134] 135 (epmap) open (UNKNOWN) [10.10.10.134] 80 (http) open (UNKNOWN) [10.10.10.134] 22 (ssh) open (UNKNOWN) [10.10.10.134] 21 (ftp) open For netcat scan, I used the command: nc -nvz -w 1 10.10.10.129 1-1024 to find the open port on IP: 10.10.10.129 [10.10.10.129] 631 (ipp) open [10.10.10.129] 445 (microsoft-ds) open [10.10.10.129] 80 (http) open [10.10.10.129] 22 (ssh) open [10.10.10.129] 21 (ftp) open STEP 3: nmap scan I used the command: nmap 1 10.10.10.134 to find the open port on IP: 10.10.10.134 PORT STATE SERVICE 21/tcp open ftp 22/tcp open ssh 80/tcp open http 135/tcp open msrpc 139/tcp open netbios-ssn 445/tcp open microsoft-ds 3306/tcp open mysql 3389/tcp open ms-wbt-server 4848/tcp open appserv-http 7676/tcp open imqbrokerd 8009/tcp open ajp13 8022/tcp open oa-system 8031/tcp open unknown 8080/tcp open http-proxy 8181/tcp open intermapper 8383/tcp open m2mservices 8443/tcp open https-alt 9200/tcp open wap-wsp 49152/tcp open unknown 49153/tcp open unknown 49154/tcp open unknown 49155/tcp open unknown 49158/tcp open unknown nmap scan I used the command: nmap 1 10.10.10.129 to find the open port on IP: 10.10.10.129 PORT STATE SERVICE 21/tcp open ftp 22/tcp open ssh 80/tcp open http 445/tcp open microsoft-ds 631/tcp open ipp 3306/tcp open mysql 8181/tcp open intermapper 1. Yes, the nmap found more port that the netcat did not find. i. for IP: 10.10.10.134: None, netcat found the same ports as nmap but the namp found more ports. for IP: 10.10.10.129: None, netcat found the same ports as nmap but the namp found more ports. ii. for IP: 10.10.10.134: the nmap found all the following ports that the netcat did not find: 3306, 3389, 4848, 7676, 8009, 8022, 8031, 8080, 8181, 8383, 8443, 9200, 49152, 49153, 49154, 49155, 49158 for IP: 10.10.10.129: the nmap found all the following ports that the netcat did not find: 3306 and 8181. iii. The command nmap finds more ports than netcat meaning that if you want to find more available ports we neeed to use nmap. Part II: Service Discovery step 4: for IP: 10.10.10.134: I used command: nc -v 10.10.10.134 {port numbers} Port 21: 220 Microsoft FTP Service Port 22: SSH-2.0-OpenSSH_7.1 Port 80: Server: Microsoft-HTTPAPI/2.0. I had to input data to bring more information. Port 135: (epmap). I could not find any services beside epmap. Port 139: netbios-ssn. I could not find any services beside netbios-ssn. Port 445:(microsoft-ds). I could not find any services beside microsoft-ds. for IP: 10.10.10.129: I used command: nc -v 10.10.10.129 {port numbers} Port 21: 220 ProFTPD 1.3.5 Server Port 22: SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.13 Port 80: Server: Apache/2.4.7 (Ubuntu). I had to input data to bring more information. Port 445:microsoft-ds). I could not find any services beside microsoft-ds. Port 631:(ipp) I could not find any services beside (ipp). STEP 5: for IP: 10.10.10.134: I used command: nc -v 10.10.10.134 {port numbers} Port 3306: 3389: 4848: 7676: 8009: 8022: 8031: 8080: 8181: 8383: 8443: 9200: 49152: 49153: 49154: 49155: 49158: for IP: 10.10.10.129: I used command: nc -v 10.10.10.129 {port numbers} Port 3306: Port 8181: