text: NMAP(1) NMAP(1) NAME nmap - Network exploration tool and security scanner SYNOPSIS nmap [Scan Type(s)] [Options] <host(1,5) or net #1 ... [#N]> DESCRIPTION Nmap is designed to allow system administrators and curious individuals to scan large networks to determine which hosts are up and what ser- vices they are offering. nmap supports a large number of scanning techniques such as: UDP, TCP connect(), TCP SYN (half open(2,3,n)), ftp proxy (bounce attack), ICMP (ping sweep), FIN, ACK sweep, Xmas Tree, SYN sweep, IP Protocol, and Null scan. See the Scan Types section for more details. nmap also offers a number of advanced features such as remote OS detection via TCP/IP fingerprinting, stealth scanning, dynamic delay and retransmission calculations, parallel scanning, detection of down hosts via parallel pings, decoy scanning, port filtering detection, direct (non-portmapper) RPC scanning, fragmentation scanning, and flex- ible target and port specification. Significant effort has been put into decent nmap performance for non- root users. Unfortunately, many critical kernel interfaces (such as raw(3x,7,8,3x cbreak) sockets) require root privileges. nmap should be run as root when- ever possible (not setuid root, of course). The result of running nmap is usually a list of interesting ports on the machine(s) being scanned (if(3,n) any). Nmap always gives the port's "well known" service name (if(3,n) any), number, state, and protocol. The state is either "open(2,3,n)", "filtered", or "unfiltered". Open means that the target machine will accept(2,8)() connections on that port. Filtered means that a firewall, filter(1,3x,3x curs_util), or other network obstacle is covering the port and preventing nmap from determining whether the port is open. Unfiltered means that the port is known by nmap to be closed and no firewall/filter(1,3x,3x curs_util) seems to be interfering with nmap's attempts to deter- mine this. Unfiltered ports are the common case and are only shown when most of the scanned ports are in(1,8) the filtered state. Depending on options used, nmap may also report the following charac- teristics of the remote host: OS in(1,8) use, TCP sequentiality, usernames running the programs which have bound to each port, the DNS name, whether the host(1,5) is a smurf address, and a few others. OPTIONS Options that make sense together can generally be combined. Some options are specific to certain scan modes. nmap tries to catch and warn the user about psychotic or unsupported option combinations. If you are impatient, you can skip to the examples section at the end, which demonstrates common usage. You can also run nmap -h for a quick reference page listing all the options. SCAN TYPES -sS TCP SYN scan: This technique is often referred to as "half-open" scanning, because you don't open(2,3,n) a full TCP connection. You send(2,n) a SYN packet, as if(3,n) you are going to open(2,3,n) a real connection and you wait for a response. A SYN|ACK indicates the port is listen- ing. A RST is indicative of a non-listener. If a SYN|ACK is received, a RST is immediately sent to tear down the connection (actually our OS kernel does this for us). The primary advantage to this scanning technique is that fewer sites will log it. Unfortunately you need root privileges to build these custom SYN packets. This is the default scan type for privileged users. -sT TCP connect() scan: This is the most basic form of TCP scanning. The connect() system call provided by your operating system is used to open(2,3,n) a connection to every interesting port on the machine. If the port is listening, connect() will succeed, oth- erwise the port isn't reachable. One strong advantage to this technique is that you don't need any special privileges. Any user on most UNIX boxes is free to use this call. This sort(1,3) of scan is easily detectable as target host(1,5) logs will show a bunch of connection and error(8,n) messages for the services which accept(2,8)() the connection just to have it immediately shut- down. This is the default scan type for unprivileged users. -sF -sX -sN Stealth FIN, Xmas Tree, or Null scan modes: There are times when even SYN scanning isn't clandestine enough. Some firewalls and packet filters watch for SYNs to restricted ports, and programs like Synlogger and Courtney are available to detect these scans. These advanced scans, on the other hand, may be able to pass through unmolested. The idea is that closed ports are required to reply to your probe packet with an RST, while open(2,3,n) ports must ignore the pack- ets in(1,8) question (see RFC 793 pp 64). Filered ports also tend to drop probes without a response, so Nmap considers ports "open(2,3,n)|filtered" when it fails to elicit any response. If you add version(1,3,5) detection (-sV), it will try to verify(1,8) whether the ports are actually open(2,3,n) and change the state as appropriate. The FIN scan uses a bare (surprise) FIN packet as the probe, while the Xmas tree scan turns on the FIN, URG, and PUSH flags. The Null scan turns off all flags. Unfortunately Microsoft (like usual) decided to completely ignore the standard and do things their own way. Thus this scan type will not work against systems running Windows95/NT. On the positive side, this is a good way to distinguish between the two platforms. If the scan finds open(2,3,n) ports, you know the machine is not a Windows box. If a -sF,-sX,or -sN scan shows all ports closed, yet a SYN (-sS) scan shows ports being opened, you are probably looking at a Windows box. This is less(1,3) useful now that nmap has proper OS detection built in. There are also a few other systems that are broken in(1,8) the same way Windows is. They include Cisco, BSDI, HP/UX, MVS, and IRIX. All of the above send(2,n) resets from the open(2,3,n) ports when they should just drop the packet. -sP Ping scanning: Sometimes you only want to know which hosts on a network are up. Nmap can do this by sending ICMP echo(1,3x,1 builtins) request packets to every IP address on the networks you specify. Hosts that respond are up. Unfortunately, some sites such as microsoft.com block echo(1,3x,1 builtins) request packets. Thus nmap can also send(2,n) a TCP ack packet to (by default) port 80. If we get an RST back, that machine is up. A third technique involves sending a SYN packet and waiting for a RST or a SYN/ACK. For non-root users(1,5), a connect() method is used. By default (for root users(1,5)), nmap uses both the ICMP and ACK techniques in(1,8) parallel. You can change the -P option described later. Note that pinging is done by default anyway, and only hosts that respond are scanned. Only use this option if(3,n) you wish to ping sweep without doing any actual port scans. -sV Version detection: After TCP and/or UDP ports are discovered using one of the other scan methods, version(1,3,5) detection communi- cates with those ports to try and determine more about what is actually running. A file(1,n) called nmap-service-probes is used to determine the best probes for detecting various services and the match strings to expect. Nmap tries to determine the service protocol (e.g. ftp, ssh, telnet, http), the application name (e.g. ISC Bind, Apache httpd, Solaris telnetd), the version(1,3,5) num- ber, and sometimes miscellaneous details like whether an X server is open(2,3,n) to connections or the SSH protocol version(1,3,5)). If Nmap was compiled with OpenSSL support, it will connect to SSL servers to deduce the service listening behind the encryption. When RPC services are discovered, the Nmap RPC grinder is used to determine the RPC program and version(1,3,5) numbers. Some UDP ports are left in(1,8) the "open(2,3,n)|filtered" state after a UDP scan is unable to determine whether the port is open(2,3,n) or filtered. Ver- sion detection will try to elicit a response from these ports (just as it does with open(2,3,n) ports), and change the state to open(2,3,n) if(3,n) it succeeds. Note that the Nmap -A option also enables this feature. For a much more detailed description of Nmap service detection, read(2,n,1 builtins) our paper at http://www.insecure.org/nmap/ver- sionscan.html . There is a related --version_trace option which causes Nmap to print out extensive debugging info(1,5,n) about what version(1,3,5) scanning is doing (this is a subset of what you would get with --packet_trace). -sU UDP scans: This method is used to determine which UDP (User Datagram Protocol, RFC 768) ports are open(2,3,n) on a host. The tech- nique is to send(2,n) 0 byte UDP packets to each port on the target machine. If we receive an ICMP port unreachable message, then the port is closed. If a UDP response is received to the probe (unusual), the port is open. If we get no response at all, the state is "open(2,3,n)|filtered", meaning that the port is either open(2,3,n) or packet filters are blocking the communication. Versions scan (-sV) can be used to help differentiate the truly open(2,3,n) ports from the filtered ones. Some people think UDP scanning is pointless. I usually remind them of the Solaris rpcbind hole. Rpcbind can be found hiding on an undocumented(2,3) UDP port somewhere above 32770. So it doesn't matter that 111 is blocked by the firewall. But can you find which of the more than 30,000 high ports it is listening on? With a UDP scanner you can! There is also the cDc Back Orifice backdoor program which hides on a configurable UDP port on Win- dows machines. Not to mention the many commonly vulnerable ser- vices that utilize UDP such as snmp, tftp, NFS, etc. Unfortunately UDP scanning is sometimes painfully slow since most hosts implement a suggestion in(1,8) RFC 1812 (section 188.8.131.52) of limiting the ICMP error(8,n) message rate. For example, the Linux kernel (in(1,8) net/ipv4/icmp.h) limits destination unreachable mes- sage generation to 80 per 4 seconds, with a 1/4 second penalty if(3,n) that is exceeded. Solaris has much more strict limits (about 2 messages per second) and thus takes even longer to scan. nmap detects this rate limiting and slows down accordingly, rather than flood the network with useless packets that will be ignored by the target machine. As is typical, Microsoft ignored the suggestion of the RFC and does not seem to do any rate limiting at all on Win95 and NT machines. Thus we can scan all 65K ports of a Windows machine very quickly. Whoop! -sO IP protocol scans: This method is used to determine which IP protocols are supported on a host. The technique is to send(2,n) raw(3x,7,8,3x cbreak) IP packets without any further protocol header to each specified protocol on the target machine. If we receive an ICMP protocol unreachable message, then the protocol is not in(1,8) use. Otherwise we assume it is open. Note that some hosts (AIX, HP-UX, Digital UNIX) and firewalls may not send(2,n) protocol unreachable messages. This causes all of the protocols to appear "open(2,3,n)". Because the implemented technique is very similar to UDP port scanning, ICMP rate limit might apply too. But the IP protocol field has only 8 bits, so at most 256 protocols can be probed which should be possible in(1,8) reasonable time(1,2,n) anyway. -sI <zombie host(1,5)[:probeport]> Idlescan: This advanced scan method allows for a truly blind TCP port scan of the target (meaning no packets are sent to the tar- get from your real IP address). Instead, a unique side-channel attack exploits predictable "IP fragmentation ID" sequence gen- eration on the zombie host(1,5) to glean information about the open(2,3,n) ports on the target. IDS systems will display the scan as com- ing from the zombie machine you specify (which must be up and meet certain criteria). I wrote an informal paper about this technique at http://www.insecure.org/nmap/idlescan.html . Besides being extraordinarily stealthy (due to its blind nature), this scan type permits mapping out IP-based trust rela- tionships between machines. The port listing shows open(2,3,n) ports from the perspective of the zombie host. So you can try scan- ning a target using various zombies that you think might be trusted (via router/packet filter(1,3x,3x curs_util) rules). Obviously this is crucial information when prioritizing attack targets. Other- wise, you penetration testers might have to expend considerable resources "owning" an intermediate system, only to find out that its IP isn't even trusted by the target host(1,5)/network you are ultimately after. You can add a colon followed by a port number if(3,n) you wish to probe a particular port on the zombie host(1,5) for IPID changes. Otherwise Nmap will use the port it uses by default for "tcp pings". -sA ACK scan: This advanced method is usually used to map out fire- wall rulesets. In particular, it can help determine whether a firewall is stateful or just a simple packet filter(1,3x,3x curs_util) that blocks incoming SYN packets. This scan type sends an ACK packet (with random(3,4,6) looking acknowl- edgment/sequence numbers) to the ports specified. If a RST comes back, the ports is classified as "unfiltered". If nothing comes back (or if(3,n) an ICMP unreachable is returned), the port is classified as "filtered". Note that nmap usually doesn't print "unfiltered" ports, so getting no ports shown in(1,8) the output is usually a sign that all the probes got through (and returned RSTs). This scan will obviously never show ports in(1,8) the "open(2,3,n)" state. -sW Window scan: This advanced scan is very similar to the ACK scan, except that it can sometimes detect open(2,3,n) ports as well as fil- tered/unfiltered due to an anomaly in(1,8) the TCP window size reporting by some operating systems. Systems vulnerable to this include at least some versions of AIX, Amiga, BeOS, BSDI, Cray, Tru64 UNIX, DG/UX, OpenVMS, Digital UNIX, FreeBSD, HP-UX, OS/2, IRIX, MacOS, NetBSD, OpenBSD, OpenStep, QNX, Rhapsody, SunOS 4.X, Ultrix, VAX, and VxWorks. See the nmap-hackers mailing list archive for a full list. -sR RPC scan. This method works in(1,8) combination with the various port scan methods of Nmap. It takes all the TCP/UDP ports found open(2,3,n) and then floods them with SunRPC program NULL commands in(1,8) an attempt to determine whether they are RPC ports, and if(3,n) so, what program and version(1,3,5) number they serve up. Thus you can effectively obtain the same info(1,5,n) as "rpcinfo -p" even if(3,n) the target's portmapper is behind a firewall (or protected by TCP wrappers). Decoys do not currently work with RPC scan, at some point I may add decoy support for UDP RPC scans. This is auto- matically enabled as part of version(1,3,5) scan (-sV) if(3,n) you request that. -sL List scan. This method simply generates and prints a list of IP addresses or hostnames without actually pinging or port scanning them. DNS name resolution will be performed unless you use -n. -b <ftp relay host(1,5)> FTP bounce attack: An interesting "feature" of the ftp protocol (RFC 959) is support for "proxy" ftp connections. In other words, I should be able to connect from evil.com to the FTP server of target.com and request that the server send(2,n) a file(1,n) ANYWHERE on the Internet! Now this may have worked well in(1,8) 1985 when the RFC was written. But in(1,8) today's Internet, we can't have people hijacking ftp servers and requesting that data be spit out to arbitrary points on the Internet. As *Hobbit* wrote back in(1,8) 1995, this protocol flaw "can be used to post virtually untraceable mail(1,8) and news, hammer on servers at various sites, fill up disks, try to hop firewalls, and generally be annoying and hard to track down at the same time." What we will exploit this for is to (surprise, surprise) scan TCP ports from a "proxy" ftp server. Thus you could connect to an ftp server behind a firewall, and then scan ports that are more likely to be blocked (139 is a good one). If the ftp server allows reading from and writing to some directory (such as /incoming), you can send(2,n) arbitrary data to ports that you do find open(2,3,n) (nmap doesn't do this for you though). The argument passed to the "b" option is the host(1,5) you want to use as a proxy, in(1,8) standard URL notation. The format is: user- name:password@server:port. Everything but server is optional. To determine what servers are vulnerable to this attack, you can see my article in(1,8) Phrack 51. An updated version(1,3,5) is available at the nmap URL (http://www.insecure.org/nmap). GENERAL OPTIONS None of these are required but some can be quite useful. Note that the -P options can now be combined -- you can increase your odds of penetrating strict firewalls by sending many probe types using different TCP ports/flags and ICMP codes. -P0 Do not try to ping hosts at all before scanning them. This allows the scanning of networks that don't allow ICMP echo(1,3x,1 builtins) requests (or responses) through their firewall. microsoft.com is an example of such a network, and thus you should always use -P0 or -PS80 when portscanning microsoft.com. Note that "ping" in(1,8) this context may involve more than the traditional ICMP echo(1,3x,1 builtins) request packet. Nmap supports many such probes, including arbi- trary combinations of TCP, UDP, and ICMP probes. By default, Nmap sends an ICMP echo(1,3x,1 builtins) request and a TCP ACK packet to port 80. -PA [portlist] Use TCP ACK "ping" to determine what hosts are up. Instead of sending ICMP echo(1,3x,1 builtins) request packets and waiting for a response, we spew out TCP ACK packets throughout the target network (or to a single machine) and then wait for responses to trickle back. Hosts that are up should respond with a RST. This option pre- serves the efficiency of only scanning hosts that are up while still allowing you to scan networks/hosts that block ping pack- ets. For non root UNIX users(1,5), we use connect() and thus a SYN is actually being sent. To set(7,n,1 builtins) the destination ports of the probe packets use -PA<port1>[,port2][...]. The default port is 80, since this port is often not filtered out. Note that this option now accepts multiple, comma-separated port numbers. -PS [portlist] This option uses SYN (connection request) packets instead of ACK packets for root users. Hosts that are up should respond with a RST (or, rarely, a SYN|ACK). You can set(7,n,1 builtins) the destination ports in(1,8) the same manner as -PA above. -PU [portlist] This option sends UDP probes to the specified hosts, expecting an ICMP port unreachable packet (or possibly a UDP response if(3,n) the port is open(2,3,n)) if(3,n) the host(1,5) is up. Since many UDP services won't reply to an empty packet, your best bet might be to send(2,n) this to expected-closed ports rather than open(2,3,n) ones. -PE This option uses a true ping (ICMP echo(1,3x,1 builtins) request) packet. It finds hosts that are up and also looks for subnet-directed broadcast addresses on your network. These are IP addresses which are externally reachable and translate to a broadcast of incoming IP packets to a subnet of computers. These should be eliminated if(3,n) found as they allow for numerous denial of service attacks (Smurf is the most common). -PP Uses an ICMP timestamp request (type 13) packet to find listen- ing hosts. -PM Same as -PE and -PP except uses a netmask request (ICMP type 17). -PB This is the default ping type. It uses both the ACK ( -PA ) and ICMP echo(1,3x,1 builtins) request ( -PE ) sweeps in(1,8) parallel. This way you can get firewalls that filter(1,3x,3x curs_util) either one (but not both). The TCP probe destination port can be set(7,n,1 builtins) in(1,8) the same manner as with -PA above. Note that this flag is now deprecated as pingtype flags can now be used in(1,8) combination. So you should use both "PE" and "PA" (or rely on the default behavior) to achieve this same effect. -O This option activates remote host(1,5) identification via TCP/IP fin- gerprinting. In other words, it uses a bunch of techniques to detect subtleties in(1,8) the underlying operating system network stack of the computers you are scanning. It uses this informa- tion to create a "fingerprint" which it compares with its data- base of known OS fingerprints (the nmap-os-fingerprints file(1,n)) to decide what type of system you are scanning. If Nmap is unable to guess the OS of a machine, and conditions are good (e.g. at least one open(2,3,n) port), Nmap will provide a URL you can use to submit the fingerprint if(3,n) you know (for sure) the OS running on the machine. By doing this you contribute to the pool of operating systems known to nmap and thus it will be more accurate for everyone. Note that if(3,n) you leave an IP address on the form, the machine may be scanned when we add the fingerprint (to validate that it works). The -O option also enables several other tests. One is the "Uptime" measurement, which uses the TCP timestamp option (RFC 1323) to guess when a machine was last rebooted. This is only reported for machines which provide this information. Another test enabled by -O is TCP Sequence Predictability Clas- sification. This is a measure that describes approximately how hard it is to establish a forged TCP connection against the remote host. This is useful for exploiting source-IP based trust relationships (rlogin, firewall filters, etc) or for hid- ing the source of an attack. The actual difficulty number is based on statistical sampling and may fluctuate. It is gener- ally better to use the English classification such as "worthy challenge" or "trivial joke". This is only reported in(1,8) normal output with -v. When verbose mode (-v) is on with -O, IPID Sequence Generation is also reported. Most machines are in(1,8) the "incremental" class, which means that they increment the "ID" field in(1,8) the IP header for each packet they send. This makes them vulnerable to sev- eral advanced information gathering and spoofing attacks. --osscan_limit OS detection is far more effective if(3,n) at least one open(2,3,n) and one closed TCP port are found. Set this option and Nmap will not even try OS detection against hosts that do not meet this crite- ria. This can save substantial time(1,2,n), particularly on -P0 scans against many hosts. It only matters when OS detection is requested (-O or -A options). -A This option enables _a_dditional _a_dvanced and _a_ggressive options. I haven't decided exactly which it stands for yet :). Presently this enables OS Detection (-O) and version(1,3,5) scanning (-sV). More features may be added in(1,8) the future. The point is to enable a comprehensive set(7,n,1 builtins) of scan options without people having to remember a large set(7,n,1 builtins) of flags. This option only enables features, and not timing options (such as -T4) or ver- bosity options (-v) that you might wan't as well. -6 This options enables IPv6 support. All targets must be IPv6 if(3,n) this option is used, and they can be specified via normal DNS name (AAAA record) or as a literal IP address such as 3ffe:501:4819:2000:210:f3ff:fe03:4d0 . Currently, connect() TCP scan and TCP connect() Ping scan are supported. If you need UDP or other scan types, have a look(1,8,3 Search::Dict) at http://nmap6.source- forge.net/ . -f This option causes the requested scan (including ping scans) to use tiny fragmented IP packets. The idea is to split(1,n) up the TCP header over several packets to make it harder for packet fil- ters, intrusion detection systems, and other annoyances to detect what you are doing. Be careful with this! Some programs have trouble handling these tiny packets. The old-school sniffer named(5,8) Sniffit segmentation faulted immediately upon receiving the first fragment. Specify this option once, and Nmap splits the packets into 8 bytes or less(1,3) after the IP header. So a 20-byte TCP header would be split(1,n) into 3 packets. Two with eight bytes of the TCP header, and one with the final four. Of course each fragment also has an IP header. Specify -f again to use 16 bytes per fragment (reducing the number of fragments). Or you can specify your own offset size with the --mtu option. Don't also specify -f if(3,n) you use --mtu. The off- set(7,n,1 builtins) must be a multiple of 8. While fragmented packets won't get by packet filters and firewalls that queue(1,3) all IP fragments, such as the CONFIG_IP_ALWAYS_DEFRAG option in(1,8) the Linux kernel, some networks can't afford the performance hit this causes and thus leave it disabled. Some source systems defragment outgoing packets in(1,8) the kernel. Linux with the ip(7,8) tables connection tracking module is one such example. Do a scan with a sniffer such as ethereal running to ensure that sent packets are frag- mented. Note that I do not yet have this option working on all systems. It works fine for my Linux, FreeBSD, and OpenBSD boxes and some people have reported success with other *NIX variants. -v Verbose mode. This is a highly recommended option and it gives out more information about what is going on. You can use it twice for greater effect. You can also use -d a few times if(3,n) you really want to get crazy with scrolling the screen! -h This handy option display a quick reference screen of nmap usage options. As you may have noticed, this man(1,5,7) page is not exactly a "quick reference" :) -oN <logfilename> This logs the results of your scans in(1,8) a normal human readable form into the file(1,n) you specify as an argument. -oX <logfilename> This logs the results of your scans in(1,8) XML form into the file(1,n) you specify as an argument. This allows programs to easily cap- ture and interpret Nmap results. You can give the argument "-" (without quotes) to shoot output into stdout (for shell pipe- lines, etc). In this case normal output will be suppressed. Watch out for error(8,n) messages if(3,n) you use this (they will still go to stderr). Also note that "-v" may cause some extra informa- tion to be printed. The Document Type Definition (DTD) defining the XML output structure is available at http://www.inse- cure.org/nmap/data/nmap.dtd . --stylesheet <filename> Nmap ships with an XSL stylesheet named(5,8) nmap.xsl for viewing or translating XML output to HTML. The XML output includes an xml- stylesheet directive which points to nmap.xml where it was ini- tially installed by Nmap (or in(1,8) the current working directory on Windows). Simply load(7,n) Nmap's XML output in(1,8) a modern web browser and it should retrieve nmap.xsl from the filesystem and use it to render results. If you wish to use a different stylesheet, specify it as the argument to --stylesheet. You must pass the full pathname or URL. One common invocation is --stylesheet http://www.insecure.org/nmap/data/nmap.xsl . This tells a browser to load(7,n) the latest version(1,3,5) of the stylesheet from Inse- cure.Org. This makes it easier to view results on a machine that doesn't have Nmap (and thus nmap.xsl) installed. So the URL is often more useful, but the local filesystem locaton of nmap.xsl is used by default for privacy reasons. --no-stylesheet Specify this option to prevent Nmap from associating any XSL stylesheet with its XML output. The xml-stylesheet directive is omitted. -oG <logfilename> This logs the results of your scans in(1,8) a grepable form into the file(1,n) you specify as an argument. This simple format provides all the information on one line (so you can easily grep for port or OS information and see all the IPs. This used to be the pre- ferred mechanism for programs to interact with Nmap, but now we recommend XML output (-oX instead). This simple format may not contain as much information as the other formats. You can give the argument "-" (without quotes) to shoot output into stdout (for shell pipelines, etc). In this case normal output will be suppressed. Watch out for error(8,n) messages if(3,n) you use this (they will still go to stderr). Also note that "-v" will cause some extra information to be printed. -oA <basefilename> This tells Nmap to log in(1,8) ALL the major formats (normal, grepable, and XML). You give a base for the filename, and the output files will be base.nmap, base.gnmap, and base.xml. -oS <logfilename> thIs l0gz th3 r3suLtS of YouR ScanZ iN a s|<ipT kiDd|3 f0rM iNto THe fiL3 U sPecfy 4s an arGuMEnT! U kAn gIv3 the 4rgument "-" (wItHOUt qUOteZ) to sh00t output iNT0 stDouT!@!! --resume <logfilename> A network scan that is canceled due to control-C, network out- age, etc. can be resumed using this option. The logfilename must be either a normal (-oN) or grepable (-oG) log from the aborted scan. No other options can be given (they will be the same as the aborted scan). Nmap will start on the machine after the last one successfully scanned in(1,8) the log file. --exclude <host1 [,host2][,host3],..."> Specifies a list of targets (hosts, ranges, netblocks) that should be excluded from a scan. Useful to keep from scanning yourself, your ISP, particularly sensitive hosts, etc. --excludefile <exclude_file> Same functionality as the --exclude option, only the excluded targets are provided in(1,8) an newline-delimited exclude_file rather than on the command line. --append_output Tells Nmap to append scan results to any output files you have specified rather than overwriting those files. -iL <inputfilename> Reads target specifications from the file(1,n) specified RATHER than from the command line. The file(1,n) should contain a list of host(1,5) or network expressions separated by spaces, tabs, or newlines. Use a hyphen (-) as inputfilename if(3,n) you want nmap to read(2,n,1 builtins) host(1,5) expressions from stdin (like at the end of a pipe(2,8)). See the section target specification for more information on the expres- sions you fill the file(1,n) with. -iR <num hosts> This option tells Nmap to generate its own hosts to scan by sim- ply picking random(3,4,6) numbers :). It will never end after the given number of IPs has been scanned -- use 0 for a never-ending scan. This option can be useful for statistical sampling of the Internet to estimate various things. If you are ever really bored, try nmap -sS -PS80 -iR 0 -p 80 to find some web servers to look(1,8,3 Search::Dict) at. -p <port ranges> This option specifies what ports you want to specify. For exam- ple "-p 23" will only try port 23 of the target host(1,5)(s). "-p 20-30,139,60000-" scans ports between 20 and 30, port 139, and all ports greater than 60000. The default is to scan all ports between 1 and 1024 as well as any ports listed in(1,8) the services file(1,n) which comes with nmap. For IP protocol scanning (-sO), this specifies the protocol number you wish to scan for (0-255). When scanning both TCP and UDP ports, you can specify a particu- lar protocol by preceding the port numbers by "T:" or "U:". The qualifier lasts until you specify another qualifier. For exam- ple, the argument "-p U:53,111,137,T:21-25,80,139,8080" would scan UDP ports 53,111,and 137, as well as the listed TCP ports. Note that to scan both UDP & TCP, you have to specify -sU and at least one TCP scan type (such as -sS, -sF, or -sT). If no pro- tocol qualifier is given, the port numbers are added to all pro- tocol lists. -F Fast scan mode. Specifies that you only wish to scan for ports listed in(1,8) the services file(1,n) which comes with nmap (or the protocols file(1,n) for -sO). This is obviously much faster than scanning all 65535 ports on a host. -D <decoy1 [,decoy2][,ME],...> Causes a decoy scan to be performed which makes it appear to the remote host(1,5) that the host(1,5)(s) you specify as decoys are scanning the target network too. Thus their IDS might report 5-10 port scans from unique IP addresses, but they won't know which IP was scanning them and which were innocent decoys. While this can be defeated through router path tracing, response-dropping, and other "active" mechanisms, it is generally an extremely effec- tive technique for hiding your IP address. Separate each decoy host(1,5) with commas, and you can optionally use "ME" as one of the decoys to represent the position you want your IP address to be used. If you put "ME" in(1,8) the 6th position or later, some common port scan detectors (such as Solar Designer's excellent scanlogd) are unlikely to show your IP address at all. If you don't use "ME", nmap will put you in(1,8) a random(3,4,6) position. Note that the hosts you use as decoys should be up or you might accidentally SYN flood your targets. Also it will be pretty easy to determine which host(1,5) is scanning if(3,n) only one is actually up on the network. You might want to use IP addresses instead of names (so the decoy networks don't see you in(1,8) their name- server logs). Also note that some "port scan detectors" will firewall/deny routing to hosts that attempt port scans. The problem is that many scan types can be forged (as this option demonstrates). So attackers can cause such a machine to sever connectivity with important hosts such as its internet gateway, DNS TLD servers, sites like Windows Update, etc. Most such software offers whitelist capabilities, but you are unlikely to enumerate all of the critical machines. For this reason we never recommend tak- ing action against port scans that can be forged, including SYN scans, UDP scans, etc. The machine you block could just be a decoy. Decoys are used both in(1,8) the initial ping scan (using ICMP, SYN, ACK, or whatever) and during the actual port scanning phase. Decoys are also used during remote OS detection ( -O ). It is worth noting that using too many decoys may slow your scan and potentially even make it less(1,3) accurate. Also, some ISPs will filter(1,3x,3x curs_util) out your spoofed packets, although many (currently most) do not restrict spoofed IP packets at all. -S <IP_Address> In some circumstances, nmap may not be able to determine your source address ( nmap will tell you if(3,n) this is the case). In this situation, use -S with your IP address (of the interface you wish to send(2,n) packets through). Another possible use of this flag is to spoof the scan to make the targets think that someone else is scanning them. Imagine a company being repeatedly port scanned by a competitor! This is not a supported usage (or the main purpose) of this flag. I just think it raises an interesting possibility that people should be aware of before they go accusing others of port scan- ning them. -e would generally be required for this sort(1,3) of usage. -e <interface> Tells nmap what interface to send(2,n) and receive packets on. Nmap should be able to detect this but it will tell you if(3,n) it cannot. --source_port <portnumber> Sets the source port number used in(1,8) scans. Many naive firewall and packet filter(1,3x,3x curs_util) installations make an exception in(1,8) their rule- set(7,n,1 builtins) to allow DNS (53) or FTP-DATA (20) packets to come through and establish a connection. Obviously this completely subverts the security advantages of the firewall since intruders can just masquerade as FTP or DNS by modifying their source port. Obvi- ously for a UDP scan you should try 53 first and TCP scans should try 20 before 53. Note that this is only a request -- nmap will honor it only if(3,n) and when it is able to. For example, you can't do TCP ISN sampling all from one host:port to one host:port, so nmap changes the source port even if(3,n) you used this option. This is an alias for the shorter, but harder to remem- ber, -g option. Be aware that there is a small performance penalty on some scans for using this option, because I sometimes store useful informa- tion in(1,8) the source port number. --data_length <number> Normally Nmap sends minimalistic packets that only contain a header. So its TCP packets are generally 40 bytes and ICMP echo(1,3x,1 builtins) requests are just 28. This option tells Nmap to append the given number of random(3,4,6) bytes to most of the packets it sends. OS detection (-O) packets are not affected, but most pinging and portscan packets are. This slows things down, but can be slightly less(1,3) conspicuous. -n Tells Nmap to NEVER do reverse DNS resolution on the active IP addresses it finds. Since DNS is often slow, this can help speed things up. -R Tells Nmap to ALWAYS do reverse DNS resolution on the target IP addresses. Normally this is only done when a machine is found to be alive. -r Tells Nmap NOT to randomize the order in(1,8) which ports are scanned. --ttl <value> Sets the IPv4 time(1,2,n) to live field in(1,8) sent packets to the given value. --randomize_hosts Tells Nmap to shuffle each group of up to 2048 hosts before it scans them. This can make the scans less(1,3) obvious to various network monitoring systems, especially when you combine it with slow timing options (see below). -M <max sockets> Sets the maximum number of sockets that will be used in(1,8) parallel for a TCP connect() scan (the default). This is useful to slow down the scan a little bit and avoid crashing remote machines. Another approach is to use -sS, which is generally easier for machines to handle. --packet_trace Tells Nmap to show all the packets it sends and receives in(1,8) a tcpdump-like format. This can be tremendously useful for debug- ging, and is also a good learning tool. --datadir [directoryname] Nmap obtains some special data at runtime in(1,8) files named(5,8) nmap- service-probes, nmap-services, nmap-protocols, nmap-rpc, nmap- mac-prefixes, and nmap-os-fingerprints. Nmap first searches these files in(1,8) the directory option to --datadir. Any files not found there, are searched for in(1,8) the directory specified by the NMAPDIR environmental variable. Next comes ~/.nmap for real and effective UIDs (POSIX systems only) or location of the Nmap exe- cutable (Win32 only), and then a compiled-in location such as /usr/local/share/nmap or /usr/share/nmap . As a last resort, Nmap will look(1,8,3 Search::Dict) in(1,8) the current directory. TIMING OPTIONS Generally Nmap does a good job at adjusting for Network charac- teristics at runtime and scanning as fast as possible while min- imizing that chances of hosts/ports going undetected. However, there are same cases where Nmap's default timing policy may not meet your objectives. The following options provide a fine level of control over the scan timing: -T <Paranoid|Sneaky|Polite|Normal|Aggressive|Insane> These are canned timing policies for conveniently expressing your priorities to Nmap. Paranoid mode scans very slowly in(1,8) the hopes of avoiding detection by IDS systems. It serializes all scans (no parallel scanning) and generally waits at least 5 min- utes between sending packets. Sneaky is similar, except it only waits 15 seconds between sending packets. Polite is meant to ease load(7,n) on the network and reduce the chances of crashing machines. It serializes the probes and waits at least 0.4 sec- onds between them. Note that this is generally at least an order of magnitude slower than default scans, so only use it when you need to. Normal is the default Nmap behavior, which tries to run as quickly as possible without overloading the net- work or missing hosts/ports. Aggressive This option can make certain scans (especially SYN scans against heavily filtered hosts) much faster. It is recommended for impatient folks with a fast net connection. Insane is only suitable for very fast networks or where you don't mind losing some information. It times out hosts in(1,8) 15 minutes and won't wait more than 0.3 sec- onds for individual probes. It does allow for very quick net- work sweeps though :). You can also reference these by number (0-5). For example, "-T0" gives you Paranoid mode and "-T5" is Insane mode. If you wish to set(7,n,1 builtins) specific timing values such as --max_rtt_timeout or --host_timeout, place them after any -T option on the command line. Otherwise the defaults for the selected timing mode will override your choices. --host_timeout <milliseconds> Specifies the amount of time(1,2,n) Nmap is allowed to spend scanning a single host(1,5) before giving up on that IP. The default timing mode has no host(1,5) timeout. --max_rtt_timeout <milliseconds> Specifies the maximum amount of time(1,2,n) Nmap is allowed to wait for a probe response before retransmitting or timing out that par- ticular probe. The default mode sets this to about 9000. --min_rtt_timeout <milliseconds> When the target hosts start to establish a pattern of responding very quickly, Nmap will shrink the amount of time(1,2,n) given per probe. This speeds up the scan, but can lead to missed packets when a response takes longer than usual. With this parameter you can guarantee that Nmap will wait at least the given amount of time(1,2,n) before giving up on a probe. --initial_rtt_timeout <milliseconds> Specifies the initial probe timeout. This is generally only useful when scanning firewalled hosts with -P0. Normally Nmap can obtain good RTT estimates from the ping and the first few probes. The default mode uses 6000. --max_hostgroup <numhosts> Specifies the maximum number of hosts that Nmap is allowed to scan in(1,8) parallel. Most of the port scan techniques support multi-host operation, which makes them much quicker. Spreading the load(7,n) among multiple target hosts makes the scans gentler. The downside is increased results latency. You need to wait for all hosts in(1,8) a group to finish, rather than having them pop up one by one. Specify an argument of one for old-style (one host(1,5) at a time(1,2,n)) Nmap behavior. Note that the ping scanner handles its own grouping, and ignores this value. --min_hostgroup <numhosts> Specifies the minimum host(1,5) group size (see previous entry). Large values (such as 50) are often beneficial for unattended scans, though they do take up more memory. Nmap may override this preference when it needs to, because a group must all use the same network interface, and some scan types can only handle one host(1,5) at a time. --max_parallelism <number> Specifies the maximum number of scans Nmap is allowed to perform in(1,8) parallel. Setting this to one means Nmap will never try to scan more than 1 port at a time. It also effects other parallel scans such as ping sweep, RPC scan, etc. --min_parallelism <number> Tells Nmap to scan at least the given number of ports in(1,8) paral- lel. This can speed up scans against certain firewalled hosts by an order of magnitude. But be careful -- results will become unreliable if(3,n) you push it too far. --scan_delay <milliseconds> Specifies the minimum amount of time(1,2,n) Nmap must wait between probes. This is mostly useful to reduce network load(7,n) or to slow the scan way down to sneak under IDS thresholds. Nmap will sometimes increase the delay itself when it detects many dropped packets. For example, Solaris systems tend to respond with only one ICMP port unreachable packet per second during a UDP scan. So Nmap will try to detect this and lower its rate of UDP probes to one per second. --max_scan_delay <milliseconds> As noted above, Nmap will sometimes enforce a special delay between sending packets. This can provide more accurate results while reducing network congestion, but it can slow the scans down substantially. By default (with no -T options specified), Nmap allows this delay to grow to one second per probe. This option allows you to set(7,n,1 builtins) a lower or higher maximum. Even if(3,n) you set(7,n,1 builtins) it to zero, Nmap will have some delay between packet sends so that it can wait for responses and avoid having too many out- standing probes in(1,8) parallel. TARGET SPECIFICATION Everything that isn't an option (or option argument) in(1,8) nmap is treated as a target host(1,5) specification. The simplest case is listing single hostnames or IP addresses on the command line. If you want to scan a subnet of IP addresses, you can append /mask to the hostname or IP address. mask must be between 0 (scan the whole Internet) and 32 (scan the single host(1,5) specified). Use /24 to scan a class "C" address and /16 for a class "B". Nmap also has a more powerful notation which lets you specify an IP address using lists/ranges for each element. Thus you can scan the whole class "B" network 192.168.*.* by specifying "192.168.*.*" or "192.168.0-255.0-255" or even "192.168.1-50,51-255.1,2,3,4,5-255". And of course you can use the mask notation: "192.168.0.0/16". These are all equivalent. If you use asterisks ("*"), remember that most shells require you to escape them with back slashes or protect them with quotes. Another interesting thing to do is slice the Internet the other way. Instead of scanning all the hosts in(1,8) a class "B", scan "*.*.5.6-7" to scan every IP address that ends in(1,8) .5.6 or .5.7 Pick your own numbers. For more information on specifying hosts to scan, see the examples sec- tion. EXAMPLES Here are some examples of using nmap, from simple and normal to a lit- tle more complex/esoteric. Note that actual numbers and some actual domain names are used to make things more concrete. In their place you should substitute addresses/names from your own network. I do not think portscanning other networks is illegal; nor should portscans be construed by others as an attack. I have scanned hundreds of thousands of machines and have received only one complaint. But I am not a lawyer and some (anal) people may be annoyed by nmap probes. Get per- mission first or use at your own risk. nmap -v target.example.com This option scans all reserved TCP ports on the machine target.exam- ple.com . The -v means turn on verbose mode. nmap -sS -O target.example.com/24 Launches a stealth SYN scan against each machine that is up out of the 255 machines on class "C" where target.example.com resides. It also tries to determine what operating system is running on each host(1,5) that is up and running. This requires root privileges because of the SYN scan and the OS detection. nmap -sX -p 22,53,110,143,4564 198.116.*.1-127 Sends an Xmas tree scan to the first half of each of the 255 possible 8 bit subnets in(1,8) the 198.116 class "B" address space. We are testing whether the systems run sshd, DNS, pop3d(1,8), imapd(5,8), or port 4564. Note that Xmas scan doesn't work on Microsoft boxes due to their deficient TCP stack. Same goes with CISCO, IRIX, HP/UX, and BSDI boxes. nmap -v --randomize_hosts -p 80 *.*.2.3-5 Rather than focus on a specific IP range, it is sometimes interesting to slice up the entire Internet and scan a small sample from each slice. This command finds all web servers on machines with IP addresses ending in(1,8) .2.3, .2.4, or .2.5. If you are root you might as well add -sS. Also you will find more interesting machines starting at 127. so you might want to use "127-222" instead of the first asterisks because that section has a greater density of interesting machines (IMHO). host(1,5) -l company.com | cut -d -f 4 | ./nmap -v -iL - Do a DNS zone transfer to find the hosts in(1,8) company.com and then feed the IP addresses to nmap. The above commands are for my GNU/Linux box. You may need different commands/options on other operating systems. BUGS Bugs? What bugs? Send me any that you find. Patches are nice(1,2) too :) Remember to also send(2,n) in(1,8) new OS fingerprints so we can grow the data- base. Nmap will give you a submission URL when an appropriate finger- print is found. AUTHOR Fyodor <firstname.lastname@example.com> DISTRIBUTION The newest version(1,3,5) of nmap can be obtained from http://www.inse- cure.org/nmap/ The Nmap Security Scanner is (C) 1996-2004 Insecure.Com LLC. Nmap is also a registered trademark of Insecure.Com LLC. This program is free software; you may redistribute and/or modify it under the terms of the GNU General Public License as published by the Free Software Founda- tion; Version 2. This guarantees your right to use, modify, and redis- tribute this software under certain conditions. If you wish to embed Nmap technology into proprietary software, we may be willing to sell alternative licenses (contact email@example.com). Many security scan- ner vendors already license Nmap technology such as our remote OS fin- gerprinting database and code, service/version(1,3,5) detection system, and port scanning code. Note that the GPL places important restrictions on "derived works", yet it does not provide a detailed definition of that term. To avoid mis- understandings, we consider an application to constitute a "derivative work" for the purpose of this license if(3,n) it does any of the following: o Integrates source code from Nmap o Reads or includes Nmap copyrighted data files, such as nmap-os-fin- gerprints or nmap-service-probes. o Executes Nmap and parses the results (as opposed to typical shell or execution-menu apps, which simply display raw(3x,7,8,3x cbreak) Nmap output and so are not derivative works.) o Integrates/includes/aggregates Nmap into a proprietary executable installer, such as those produced by InstallShield. o Links to a library or executes a program that does any of the above The term(5,7) "Nmap" should be taken to also include any portions or derived works of Nmap. This list is not exclusive, but is just meant to clar- ify our interpretation of derived works with some common examples. These restrictions only apply when you actually redistribute Nmap. For example, nothing stops you from writing and selling a proprietary front-end to Nmap. Just distribute it by itself, and point people to http://www.insecure.org/nmap/ to download Nmap. We don't consider these to be added restrictions on top of the GPL, but just a clarification of how we interpret "derived works" as it applies to our GPL-licensed Nmap product. This is similar to the way Linus Torvalds has announced his interpretation of how "derived works" applies to Linux kernel modules. Our interpretation refers only to Nmap - we don't speak for any other GPL products. If you have any questions about the GPL licensing restrictions on using Nmap in(1,8) non-GPL works, we would be happy to help. As mentioned above, we also offer alternative license to integrate Nmap into proprietary applications and appliances. These contracts have been sold to many security vendors, and generally include a perpetual license as well as providing for priority support and updates as well as helping to fund the continued development of Nmap technology. Please email sales@inse- cure.com for further information. As a special exception to the GPL terms, Insecure.Com LLC grants per- mission to link(1,2) the code of this program with any version(1,3,5) of the OpenSSL library which is distributed under a license identical to that listed in(1,8) the included Copying.OpenSSL file(1,n), and distribute linked com- binations including the two. You must obey the GNU GPL in(1,8) all respects for all of the code used other than OpenSSL. If you modify this file(1,n), you may extend this exception to your version(1,3,5) of the file(1,n), but you are not obligated to do so. If you received these files with a written license agreement or con- tract stating terms other than the terms above, then that alternative license agreement takes precedence over these comments. Source is provided to this software because we believe users(1,5) have a right to know exactly what a program is going to do before they run it. This also allows you to audit the software for security holes (none have been found so far). Source code also allows you to port Nmap to new platforms, fix bugs, and add new features. You are highly encouraged to send(2,n) your changes to firstname.lastname@example.com for possible incorporation into the main distri- bution. By sending these changes to Fyodor or one the Insecure.Org development mailing lists, it is assumed that you are offering Fyodor and Insecure.Com LLC the unlimited, non-exclusive right to reuse, mod- ify, and relicense the code. Nmap will always be available Open Source, but this is important because the inability to relicense code has caused devastating problems for other Free Software projects (such as KDE and NASM). We also occasionally relicense the code to third parties as discussed above. If you wish to specify special license conditions of your contributions, just say so when you send(2,n) them. This program is distributed in(1,8) the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MER- CHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details at http://www.gnu.org/copyleft/gpl.html , or in(1,8) the COPYING file(1,n) included with Nmap. It should also be noted that Nmap has been known to crash certain poorly written applications, TCP/IP stacks, and even operating systems. Nmap should never be run against mission critical systems unless you are prepared to suffer downtime. We acknowledge here that Nmap may crash your systems or networks and we disclaim all liability for any damage or problems Nmap could cause. Because of the slight risk of crashes and because a few black hats like to use Nmap for reconnaissance prior to attacking systems, there are administrators who become upset and may complain when their system is scanned. Thus, it is often advisable to request permission before doing even a light scan of a network. Nmap should never be installed with special privileges (eg suid root) for security reasons. This product includes software developed by the Apache Software Founda- tion (http://www.apache.org/). The Libpcap portable packet capture library is distributed along with nmap. Libpcap was originally copy- righted by Van Jacobson, Craig Leres and Steven McCanne, all of the Lawrence Berkeley National Laboratory, University of California, Berke- ley, CA. It is now maintained by http://www.tcpdump.org . Regular expression support is provided by the PCRE library package, which is open(2,3,n) source software, written by Philip Hazel, and copyright by the University of Cambridge, England. See http://www.pcre.org/ . Nmap can optionally link(1,2) to the OpenSSL cryptography toolkit, which is available from http://www.openssl.org/ . US Export Control: Insecure.Com LLC believes that Nmap falls under US ECCN (export control classification number) 5D992. This category is called '"Information Security" "software" not controlled by 5D002'. The only restriction of this classification is AT (anti-terrorism), which applies to almost all goods and denies export to a handful of rogue nations such as Iran and North Korea. Thus exporting Nmap does not require any special license, permit, or other governmental autho- rization. NMAP(1)


text:
Your Search Results
Remote Work Program, Life Insurance, Hadoop
11 Companies
Udemy is the leading global marketplace for learning and teaching online, where more than 50 million students learn from over 150,000 courses taught by expert instructors in 65+ languages. Whether learning for professional development or personal enrichment, students can master new skills through self-paced, on-demand courses.
46Local Employees
Sling TV
Information Technology • News + Entertainment
This is a story of redefining pay-TV. Sling TV is the industry's first live streaming app, designed to serve those whose entertainment needs have not been met by cable. Sling TV shows you love without the pain of long-term contracts, installation and bloated bills. No catch. No kidding. Join Sling TV as we #TakeBackTV.
500Local Employees
Verizon Location Technology
Information Technology
Verizon Location Technology is harnessing the power of location intelligence to build customizable solutions with end-to-end development. Using 5G and Multi-Access Edge Computing, we're bringing new levels of location awareness to devices and enhancing our customers' suite of products. Join us in building technology that's moving the world forward....
75Local Employees
Aerospace • Big Data
Colorado Springs-based Bluestaq is a technology company developing transformative enterprise systems, securing disparate data using state-of-the-art practices and the latest technologies, enabling streamlined global operations through modern Artificial Intelligence and Machine Learning based analytics.
27Local Employees
Colorado SpringsLocation
Arrow Electronics, Inc.
Cloud • eCommerce
A Fortune 500 company with 20,100 employees worldwide, Arrow guides innovation forward for over 200,000 leading technology manufacturers and service providers. With 2018 sales of $30 billion, Arrow develops technology solutions that improve business and daily life. Arrow.com is the easiest place for innovators to create, make and manage technology.
1800Local Employees
AdTech • Big Data
Sovrn provides products and services to tens of thousands of online publishers that help them grow, operate their business, understand their readership, and manage consumer data. With 10,000 customers deploying one or more products across 30,000 websites, Sovrn reaches 200M consumers across more than 3.5B pageviews everyday.
149Local Employees
Cloud • Healthtech
GHX empowers healthcare organizations to maximize savings and enable better patient care using our world class cloud-based supply chain technology exchange platform, solutions, analytics and services.
329Local Employees
Xactly Corp
Founded to solve an important challenge, Xactly helps people everywhere connect and unleash their human potential through seamless, perfectly aligned Sales Performance Management. We are the market leader in our space, a consistent "Best Place to Work" award winner, and are looking to top-talent to join our global team in 2020!
300Local Employees
HR Tech • Software
Checkr's mission is to build a fairer future by improving understanding of the past. Our platform makes it easy for thousands of customers to hire millions of people every year at the speed of the gig economy. Using Checkr's advanced background check technology, companies of all sizes can better understand the dynamics of the changing workforce.
100Local Employees
eCommerce • Mobile
Visible is fundamentally changing the way consumers get, pay for and manage phone service as an app-based carrier. We're the first all-digital/cloud-based wireless carrier in the U.S., providing customers with an unlimited text, talk, data and a mobile hotspot plan. And we're doing it all with the power of Verizon's award-winning network behind us....
85Local Employees
Worldpay from FIS
Fintech • Payments
More than 8,000 colleagues around the world serve more than 800,000 merchant locations and 1,400 financial institution relationships across the globe. Our success is deeply rooted in the way we simplify payments by breaking through borders and obstacles to help businesses grow. We're advancing the ways the world pays.
700Local Employees

subset: commoncrawl


text:
Politicians and Election, Vote in Freedom, Actively Participate in Democracy, Vote for Change, Online referendum
Thabo Mbeki
> South Africa > Politicians > African National Congress > Thabo Mbeki
Thabo Mbeki is ready for your opinion, support and vote. Vote online NOW!
Thabo Mbeki - for
Die voormalige President van Suid-Afrika, asook die ANC. | A South African politician.
Thabo Mbeki - against
Click, if you do not support him. Say why.
thabo.mbeki email, waar is thabo mbeki gebore, south africa a country of two nations-thabo mbeki, thabo mbeki speech on two nations, Thabo Mbeki\'s famous speech, South Africa: two nations, mbeke two nations, THABO MBEKI\'S TWO NATIONS SPEECH, biografia de thabo, mbeki pictures fotos and more...
Related polls > Nelson Mandela, Rev. Hawu Mbatha, Jacob Zuma, Lucas Mangope, Helen Zille, Bantu Holomisa, Amichand Rajbansi, Kgalema Motlanthe, Patricia de Lille, Gwede Mantashe, Mangosuthu Buthelezi, Mosibudi Mangena, Pieter Mulder, Kenneth Meshoe, Julius Malema, Pieter Willem Botha, Mosiuoa Lekota, Joseph Seremane, Lindiwe Mazibuko, Michael Tellinger, (Thabo Mbeki) and more...


text:
Lindsay Lohan is now home after serving what was supposed to be a 30-day senetence in LA County Jail in all of 5 hours. How should she spend her time?
Writing thank you notes.
Lohan's short stay is a direct result of California's civic dysfunction. Our governing and budget system produce longer criminal sentences than we have the money to fund.
U.S. & World
News from around the country and around the globe
Who should she thank?
In the near term, Gov. Jerry Brown and the legislature, who adopted a "realignment" policy that shifts state prisoners to counties without giving counties the power to raise money to pay for more prisoners.
The result, many counties can't keep low-level offenders like Lohan in jail. There's little space and less money.
Lohan also might send a note of thanks to the U.S. Supreme Court, which triggered realignment by ordering the release of tens of thousands of state prisoners.
That order was the product of years of litigation and advocacy by civil libertarians and prisoner rights' advocates, who challenged overcrowding and sub-standard prison health care.
But most of all, Lohan should send a thank-you note to California voters.
We're the ones, after all, who have voted for long prison sentences and tough-on-crime politicians while also voting to limit taxes and mandate other, non-prison spending that made such a mess of the prisons.
While a note would be nice, it would be even nicer if Lohan cleaned up her act, made some profitable films, and paid much more taxes to the state budget.
(I, for one, was glad to hear about the Playboy shoot -- strictly as a taxpayer).
In the meantime, she and her handlers could use her high profile to tell the public, through the ever-present tabloid reporters, that if you don't want people like her on the street, you need to fix the California governing system.
Let us know what you think. Comment below, send us your thoughts via Twitter @PropZero or add your comment to our Facebook page.


text:
A tough goodbye
We weren't, I'm sorry to say, the best of friends. We didn't fuss and feud, but for whatever reason Dawn Denzer and I couldn't seem to share the genuine affection that exists between me and those who either preceded or succeeded her at the Rocky Mountain News: Bill Husted, Shery McDonald and Dahlia Weinstein.
Dawn and I were competitors. Our writing styles — and personalities — were as different as night and day, and each of us was fiercely determined to out-scoop the other.
Maybe, we were jealous of each other.
Not long after I started at The Post, I overheard her telling one of the city's most prominent women to watch out for me because "Joanne's not a society writer, she's a REPORTER." Later, I'd return the favor by rolling my eyes whenever someone would marvel at her talent for turning a clever phrase.
Now before anyone thinks I'm going to speak ill of the dead, relax. I'm not.
Dawn died on Mother's Day following a 20-year battle with Parkinson's disease. She fought the good fight, and maintained her sunny disposition up 'til the very end. I'm not so sure I could have, had I been in her shoes.
The fact that Dawn was loved was more than evident yesterday when mourners packed St. John's Cathedral for her memorial service. Former Colorado first lady Frances Owens and Mort Marks were the lectors; retired Judge Bob Fullerton delivered the eulogy and the deacon of the cathedral, the Very Rev. Peter Eaton was the officiant and homilist. Paula Arnold of Newberry Bros. supplied the flowers that decorated the altar.
After the service, everyone adjourned to Strings where owners Noel and Tammy Cunningham paid a final tribute to their dear friend by hosting a lively champagne-and-mariachi music party Dawn would have loved.
On hand to pay their respects were such friends and admirers as Sue Anschutz-Rodgers; Scott Coors; Kay Lawrence and her son, Cuz Lawrence; Joy Burns; Debi Medved; Dutchess Scheitler and her father, Joe Iacino; Carolyn MacRossie; Mary Vessels; Norm Early; Jo Farrell; Sally Rippey; Jack Jonas; Ron Fukuhara; Jim Pfister and Marc Roth; ZeZe Kreidle; Judi and Marvin Wolf; Leo and Linda Goto; Rex John; Pat Smedley; Barbara Knight; Jerry and Becky Barnett; Vernon Kaitz; Irene Zarlengo; Patterson Benero; drag queens Nina Montaldo and Jackie O; Thomas Edmonds Hardy; Cal and Gretchen Pope; Jill Behr; Kristina Davidson; Larry and Wanda Fanning; Nikolo Balkanski; Jane Withers; Joanne Kalish; and Jamie and Alan Angelich.
It was Jamie, along with Sharon Whiton Gelt and Mary Margaret Wright, who stuck with Dawn as her Parkinson's worsened. They visited her often, sometimes more than once a day, at her final home, Shalom Park, fixing her hair and applying makeup so she could retain her dignity as Parkinson's caused her body to fail.
That neither Dawn nor I made the effort to know each other better is a huge regret. We probably had a lot more in common than either of us could have imagined. And I can only hope to have made friends who remain as loyal as hers.
Denver Post Society Editor Joanne Davidson's column appears every Sunday, Wednesday and Friday in the Scene section. She can be reached at 303-809-1314 or email@example.com.


text:
Coming soon – GDP per cm, not just per cap
Posted by Dave Bath on 2011-07-25
If the figures in this economics research paper stand up (ahem) on nation-by-nation economic performance, one wonders whether performance of individual companies might show the same correlation, … and intrusive x-rays might be used during hiring procedures, but hopefully not included in the company prospectus.
The research shows a relationship between average erect male member length and economic growth – an inverted U shape – with not-too-big, not-too-small, but just right (13.5 cm), leading to the best economic growth.
Imagine the spam: "Dear CEO – are you giving your stakeholders enough satisfaction?" Imagine the econometric pages – we might get gory statistics on current accounts and budget balances per-cm as well as per-cap.
It's not like it is only a minor effect:
Somewhat surprisingly, male organ was a stronger determinant of economic development than country's political regime type at the Polity IV autocracy democracy spectrum.
The authors try to explore various reasons for this (including the male tendency to seek self-esteem in the wrong places, and they have interesting ties to gender equality, given the value women bring to the workplace:
First, could the size of male organ be non-linearly related to the value society put on women and thus aggravate economic development? A brief observation of the data suggests that gender equality is less established at the extremes of the male organ distribution, namely in Asia and Africa. This would be consistent with the nding that the the 1985 GDP and male organ experienced an inverted U-shaped relationship. However, this does not reverberate well with the result that GDP growth between 1960 and 1985 and male organ are negatively associated. Ignoring these contradictions it is also sensible to ask why penile length and gender equality would be even related in the rst place?
Of course, it's econometrics, so there has to be some underlying maths, and something about competitive advantage of nations:
Third, in an evidently Freudian line of thought the notion of self-esteem might be at play. In particular, male organ size s and income y could be considered factors in the aggregate 'self-esteem production function' f and hence affect utility u. Assuming the following functional form and decreasing returns of self-esteem, namely u = f(y+s) and f'(.) > 0, f"(.) < 0, the 'small male organ' countries would gain more utility by expanding their economy than the 'large male organ' countries. Actually the latter populations would simply exploit their nature-given, non-disposable groin-area endowments.
"non-dispoable groin-area endowments" – well non-disposable without medical intervention anyway – but it's a bit of a m…, um, I was going to say… um, an awkward phrase to mix into economic conversations. Oh well, that'd be nothing new.
However, on a more serious note, it is interesting to see self-esteem discussed as a driver of economic output – and of course, this would be independent of gender. Do bosses make their employees less effective by belittling them or making them insecure? Are executives and managers who are up-themselves and arrogant less effective than more reasonable folk.
The notion that self-esteem could be involved somewhere in the causal chain is useful – even if it does make bosses uncomfortable.
However, these findings entail one major caveat as they can only establish statistical correlations, not necessarily causalities. Hence to conclude that small male organs have driven GDP growth since 1960 is premature, however strong the correlation. Yet the results still suggest that if penile length is not the culprit, then some interplaying unobserved country or population characteristics could manifest itself in economic development. Be it as it may, any non-trivial statistical correlation with explanatory power of 15 to 20% should be taken seriously and warrants more elaborate research.
If this paper, by raising the importance of self-esteem in a workforce or the entire economy, leads to less workplace bullying, efforts by management to improve the self-esteem of workers, then the low-brow titallation and jokes (including of course, this post) will be a small price to pay.
See Also
- Hat tip: The Economist "Free Exchange" blog: Size Matters
- Male Organ and Economic Growth: Does Size Matter? – Helsinki Center for Economic Research Discussion Paper No 335, Tatu Westling, University of Helsinki, July 2011, ISSN 1795-0562. And yes, the paper is listed in with other papers with probably no smiles in them at all… titles like "Forecasting U.S. Macroeconomic and Financial Time Series with Noncausal and Causal AR Models: A Comparison" or "The role of city managers and external variables in explaining efficiency differences of Finnish municipalities".


text:
University Advancement
Welcome, Alumni and Friends
Whether you're a Sam Houston State University alumni or an admirer, you understand the value of an SHSU education— an education marked by academic excellence and exceptional teaching.
For more than 135 years, we have been preparing students to lead successful lives. Our motto, "The Measure of a Life is its Service", follows our graduates out into the world.
Our students come from all over the country—and all over the globe, with a drive to achieve. You can help SHSU continue to impact their lives, and those of future students. Be part of this commitment to service.
Get Involved!
Rekindle your SHSU memories - Join the Alumni Association. Attend events, serve as a board member, join other alumni and friends as they gather for social functions, network professionally, raise much needed resources, and recruit students.
Give Back!
Support your university by contributing to the Annual Fund or establishing your own scholarship or endowment.
Stay Connected!
Update your information so we can stay in touch. Alums, we would love to hear how and what you are doing. Submit news about yourself so we can share it.
Send us your email address so you can stay informed of all the great happenings at SHSU.
The Alumni Association will send you email updates and information about activities. Connect, network, help with scholarships, get recognized and enjoy fellow Bearkat Alums!
Keep up with university news through our publications or through Today@Sam.


text:
Holloman AFB officer killed in Keystone ski accident
HOLLOMAN AIR FORCE BASE, N.M. – A man killed in a ski accident in Colorado last weekend was an officer at New Mexico's Holloman Air Force Base.
Air Force officials say 27-year-old First Lt. Arthur M. Glaz was the vehicle management flight commander with the 49th Logistics Readiness Squadron at Holloman.
He reportedly was skiing down an intermediate trail when he struck a tree Friday in Keystone.
According to the Summit County Coroner's Office, Glaz was wearing a helmet at the time of the accident.
He served more than three years in the Air Force and had been stationed at Holloman since July 2012.
Glaz originally is from Palos Hills, Ill.
A memorial ceremony is scheduled Tuesday in the Holloman Chapel.
Glaz's funeral is set for Feb. 16 in Chicago.
Start a dialogue, stay on topic and be civil.
If you don't follow the rules, your comment may be deleted.


text:
Have an account?
Need an account?Create an account
The Cisco Quality of Service (QoS) Behavioral Model is the conceptual framework underlying the MQC -- the Modular Quality of Service (QoS) Command-Line Interface (CLI) -- which is the configuration language used to implement traffic classification and QoS policy actions on Cisco routers and switches. The model -- and the MQC -- provides a way to implement QoS consistently on Cisco routers and switches, irrespective of the implementation details of those platforms.
Review additional information about Quality of Service Behavioral Model in the Technical Support site area.
> Download Software


text:
Log In or Register
Change Currency: USD
Advanced Search
Enter your e-mail address to receive our newsletter
Your basket is empty.
Primo 45/45 Integrated Headset IN COLORS
Manufacturer: Haro Bikes
This product is currently out of stock
Hover over image to zoom
The Haro Downtown 20" bike is a great bike for the beginner or intermediate rider that is learning their BMX skills!
PLEASE NOTE: We can ONLY ship Haro complete bikes to USA addresses. Alaska, Hawaii, and Puerto Rico residents- PLEASE contact us for a shipping quote, as we will need your complete address in order to calculate correct UPS shipping!
If you are outside the USA, you MUST go through an authorized Haro bike shop in your country. While our website will allow you to add this bike to your shopping cart, we CANNOT process any Haro bike orders leaving the USA. If you are an overseas customer, and you pay for an Haro Bike order, your order WILL be canceled, and your funds will be immediately returned. No exceptions at all.
IMPORTANT: To ensure that every component on your bicycle is working properly, PlanetBMX recommends that all Haro BMX bicycles be assembled by a qualified bicycle mechanic. Improper assembly of your bicycle may lead to premature wear or failure of individual components. Failure to do so may void the manufacturer warranty.
Product Code: 29284
(c) 2006-2020 PlanetBMX / EF3Bikes
ALL RIGHTS RESERVED * No images may be used without written permission


text:
You have not viewed any products recently.
Sapphire and cobalt blue sphere on a black glass base. One imprint position with one color included.
6"W x 6 3/8"H x 1 1/2"D
Imprint Area: 4"W x 5 1/4"H
Proofs will be provided prior to production for review.
Your order will be put on hold until your proof is approved. Ship dates cannot be guaranteed due to lack of artwork or art approval.
Logos will need to be provided in a vector format (.ai or .eps) with outlined fonts. If logos are not provided in an acceptable format, additional art charges may apply.
For more information please see Artwork Specifications in our Customer Service section.
Standard production is 6-10 working days after proof approval, plus shipping time.
Rush service is available; please contact us to assist you.
Ship dates cannot be guaranteed due to lack of artwork or art approval.
All awards are gift boxed.
Additional charges will apply for personalization. Please contact us to discuss prices.
We use extreme care and diligence to make sure that our etching processes are clean and deep to ensure clear details and readable print.
This product is etched/sandblasted. Variations in size, color, pattern and texture may occur and are not considered defects. Each piece is individually unique.
Some products allow for additional engraving locations, as well as color fill. Additional charges would apply.


text:
|Version 14 (modified by AlexisWilke, 6 years ago) (diff)
Introduction to XCache
XCache is a open-source opcode cacher, which means that it accelerates the performance of PHP on servers. It optimizes performance by removing the compilation time of PHP scripts by caching the compiled state of PHP scripts into the shm (RAM) and uses the compiled version straight from the RAM. This will increase the rate of page generation time by up to 5 times as it also optimizes many other aspects of php scripts and reduces serverload.
The XCache project is lead by mOo who is also a developer of Lighttpd. Lighttpd is one of the fastest webserver programs and outperforms Apache and many other open source webserving projects so the same is being done to XCache.
Do you (the author of XCache) know apc, eaccelerator, phpa, truck-mmcache ?
Yeah, i know them very well.
I noticed phpa (PHP Accelerator) long ago, and looked at truck-mmcache around the time it was still being actively maintained. Sadly the phpa project died and never updated its code to support new releases of PHP. So I used truck-mmcache for a period of time, but... it hanged or crashed continuously when used under high load. I noticed APC later and I've been reading the source code for a long time (I couldn't have written XCache if I hadn't read those sources), discovering that APC code is simpler and more beautiful than mmcache's. Features are good, but I believe that stability is more important. So I finally turned to run APC online -- simpler often means more stable. mmcache forked eaccelerator later and they setup www.eaccelerator.net, running trac.
But why do you write XCache after that? Why not contribute to ea/apc?
I DID file bug reports, submit patches to both apc bug report system and truck-mmcache on sf.net and interact with zoeloelip, one of the main developer of eaccelerator. He's the first one who read my XCache source, long before XCache was published online. I'm not sure, but I think that his idea of rewriting ea_dasm.c is based on my Disassembler idea in XCache :)
There are many reasons for me to write XCache instead of using APC or EA:
- Some things are too big to be implemented in those other projects (ea/apc).
- I have many new ideas on opcode cacher, but I just can't break their cacher to prove that my ideas would improve performance.
- To prove my programming skills? Running your own project isn't that simple. Just programming skills are not sufficient, you need to become a project admin, design how the project will move forward, foresee the costs and benefits ... blah blah
To conclude, I've finished writing XCache for quite a long time, before then I used APC. Although it was quite stable for a php4 with flock() configuration it had become unstable once I upgraded my server to a dual cpu (4 threaded cpu) because it flock()ed badly so I used XCache instead and it seemed to solve the problem.
ea/apc are still good opcode cachers, as long as they get maintained actively, and if they are stable for you.
What's special in XCache?
see FeatureList.
By the way, I focus my effort to keep XCache stable.


text:
Cowboys owner Jerry Jones on Paxton Lynch: "I probably should have overpaid"
Dallas Cowboys owner Jerry Jones still regrets not trading up to pick quarterback Paxton Lynch in the NFL draft.
Jones told the Star-Telegram last Saturday that that he lost sleep over not overpaying Seattle for the 26th overall pick, the selection that ultimately went to the Broncos.
"When I look back on my life, I overpaid for my big successes every time," Jones said to the Star-Telegram. "And when I tried to get a bargain, get it a little cheaper or get a better deal on it, I ended up usually either getting it and not happy I got it. Or missing it.
"And I probably should have overpaid here." Read more…


text:
Adopt a Black Bear
Black bears once enjoyed a large range throughout North America in forested regions, but are now restricted to relatively undisturbed, remote, and fairly unpopulated areas, including almost all of Canada, the Appalachian mountain chain, New England, and intermittently throughout other areas of the United States. The land that the black bear depends on for survival is being threatened by over-development. Their habitats usually include hardwood forests, but any area with a large amount of plants bearing berries and oaks bearing acorns will suffice for foraging. Black bear change habitats seasonally, depending on what fruits are ripe at the time, and the availability of acorns and hazelnuts. Help NWF in its efforts to protect and recover the wild places that sustain wildlife. Adopt a black bear today!


text:
85% Raised of$50,000
FUNDRAISER SET UP DEADLINE: Apr 29, 2012
See More
Join a Teacher's Team or create your own! We are raising funds for survivors of sex trafficking and would LOVE for you to engage!
via Crowdrise 8 years ago
We're setting up your Fundraiser page right now. It will take anywhere from 3 seconds to 27 seconds.


text:
Mountain flowers, which the Japanese call "Yama Zakura", offer an amazing combination of colorful sights and intoxicating smells. Along hillsides, the individual flowers might be identifiable, but the display and bouquet they offer when combined are completely unique.
Yama Zakura's chef, Anna Bouphavichith, won last year's judges' award and this year she won the People's Choice Award for Asian food.
Such is the experience at Yama Zakura, which opened in 2005. Owner Laddavanh "Anna" Bouphavichith matches traditional sushi ingredients with her customers´ unique tastes to create one-of-a-kind displays that delight the palette.
Anna, a self-trained sushi chef, developed the idea for Yama Zakura, an infusion of Thai and Japanese flavors, with her brother-in-law, a master Thai chef. With a never-ending curiosity and flair for innovation, Anna attracts diners of all ages with her artistic presentation of tantalizing sashimi and rolls. Customers are encouraged to suggest ingredients for mouth-watering favorites. If they´re lucky, she´ll even add their self-named creations to the menu (ask about the "Denise Roll").
Just as engaging as the sushi and authentic Thai cuisine is the setting at Yama Zakura. Diners are encouraged to bask in the relaxing, artifact-enriched atmosphere, chat with Anna, and even make a few new friends.
This panorama of great food, great conversation and great ambiance make Yama Zakura a fitting tribute to its mountain flower namesake.
Check out our schedule
Note: Before placing your order, please inform your server if a person in your party has a food allergy.


text:
DetailsThe 16x25x1 3M Filtrete Ultra Allergen Air Conditioner & Furnace Air Filter will help to reduce virtually all of the most common and potentially harmful contaminants from your indoor air for up to three months. Its electrostatically charged fibers act like tiny magnets capturing bacteria, viruses, pet dander, dust and pollen leaving behind only remarkably clean indoor air. A genuine OE product, this air filter will fit into nearly any furnace or air conditioner that uses 1 inch filters of this size. Maintain or improve your indoor air quality by ordering the 3M Filtrete Ultra Allergen Air Conditioner & Furnace Air Filter from us today!
- 25% More Efficient and 15% Better Airflow than the Filtrete Micro Allergen Filter
- Creates efficient airflow throughout your home
- Genuine OEM Product
The FILTRETE-ULTRA-16x25x1 is comparable with the following part numbers
Filtrete 9831 2001 EA01DC 9801 UA01DC
Replacement for the Following UPC
00051111556306 051111020012
ContaminantsThis product captures the following contaminants:
Package Qty 1 Primary Contaminants N/A Used In Brands Filtrete Manufacturer's Id 2001 UPC 051111020012 MERV Rating MERV:11 Microparticle Performance Rating (MPR) MPR:1500 Advertised Size (in) 16 x 25 x 1 Actual Size (in) 15 7/10 inches (length) x 24 7/10 inches (width) x 8/10 inches (depth) Actual Size (cm) 39.878 x 62.738 x 2.032 Primary Filter Media N/A Filter Life (months) 3 months Primary Filter Media N/A


text:
Generic and Guest Accounts
On occasion a College employee will sponsor campus guests such as auditors, college representatives, BCI, GATE, or other visitors who may require temporary access to our network that otherwise do not have a personal LCC Username. When this occurs, we ask that the sponsoring College employee contact the Help Desk in advance to arrange for temporary network access. If approved, a list containing one or more user names will be sent to the employee. This includes a sign in sheet that MUST be completed and returned for security purposes. This shows who used which account at what time/day. In the event a violation of the Acceptable Use Policy occurs the sponsoring College employee is responsible for the sponsored person's actions while using LCC-owned resources and network.
Information Technology Services
Technology and Learning Center, Room 123
Phone: (517) 483-1755
Additional contact information »


text:
Finding the right drug rehab treatment center in the Stockton area can be challenging. There are so many variables to consider it can seem overwhelming. How does someone figure out all the different types of insurance, age, gender, drugs, alcohol, length of stay and all the others things involved?
We have put together a list of some drug rehab treatment centers in the Stockton and surrounding area. We suggest you contact them for further help and assistance.
Drug Rehabilitation Centers in Stockton CA
With over 850 programs, this state leads the country in the number of facilities available to treat addiction. There are over 300 residential inpatient centers, and over 500 Intensive Outpatient Programs (IOPs). California has many specialty type programs for women only, men only, adolescents, Spanish speaking, sober living as well as faith-based. Kaiser Permanante has several outlets for insurance clients. The majority of facilities are located in and around the largest city of Los Angeles. San Francisco and the San Diego metro area.
Here is a list of providers within this geographic area. They are primarily hospital-based programs. Most hospital-based programs accept Medicare, Medicaid, state-funded and private insurance. In general they do medical detox. Most offer some other level of care, such as Intensive Outpatient (IOP) and /or Partial Hospitalization Programs (PHP). Their staff is very helpful and knowledgeable. If you need help finding a residential program, call us and we can assist you.
Listed in alphabetical order
|Saint Josephs Behavioral Health Center
See Map Below – Program Details
Below is a map of the above listed recovery programs.
Click on any arrow to bring up more information about the facility, including reviews which can be found on the detail pop-up screen. For website and other information, click the drop down menu in the upper left corner of the map. To access detailed information; click on the listing for a program. You can also simply click on the "red post marker" to bring up the detail screen. Reviews can be found on the detail screen.
Reviews and website information can be found on the detail screen.
Be sure and use the drop down menu in the upper left-hand corner for more information and quick access.
There is more than one type of program for substance abuse. The "30 day" inpatient type of a facility is the most intense and suggested for people with chronic addiction problems. Call us for detailed information about the various levels in the "continuum of care".
There are 4 levels of treatment care. Each provides a different level and type of service.
levels of care:
- Detoxification
- Intensive Outpatient ( IOP)
- Partial Day Programs
- Inpatient Residential
Detox & Stabilization
Detoxification from alcohol and any mood altering chemicals is the first phase of treatment. Detox MUST be done under the medical supervision of a licensed MD. Today, there are state-of-the-art medications available to ease and minimize the cravings and effects of withdrawal.
There is a possibility withdrawal may cause a severe reaction, resulting in the "Delirium Tremors" (DTs). If someone does go into the DTs, there is a 30% chance it will be fatal.
Intensive Outpatient Programs
An outpatient facility offers similar services as partial day and inpatient except clients do not stay at the facility overnight. Intensive outpatient (IOP) generally offers 1 hour of treatment 3 days a week. Group therapy includes skills training, relapse prevention, cognitive behavioral therapy (CBT), dialectical behavior therapy (DBT) and motivational enhancement therapy (MET). A qualified addiction specialist, trained in the various therapies, leads the sessions.
The difference between Outpatient and Intensive Outpatient is how many times per week a client is required to attend.
- Individual Psychotherapy
- Group Therapy
- Relapse Prevention
- Lectures and Education
Partial Day Programs
Partial Hospital Programs (PHP), is also known as "day treatment". It is a more intensive level of care than outpatient. It provides a half day of therapy 5 times per week. Clients do not stay overnight while being provided therapy and care. This level fills the need of some individuals who need daily treatment, but are unable to attend full-time inpatient residential. PHP provides virtually all the same types of therapy as outpatient on a more intense and regular basis.
Inpatient Residential
Residential inpatient programs are a type of therapy where the individual lives in the center and receives rehabilitation over a course of several weeks or months. These live-in facilities specialize in expert care for chemical dependency, alcoholism, as well any underlying psychological problems. Because almost half of all people suffering from substance abuse are also suffering from a co-existing mental health condition, many facilities offer some type of dual therapy that addresses both.
California Substance Use Disorder Services
Substance use is having a devastating effect on individuals, families and communities in California. It affects individual lives and our economy in many ways through impacts on domestic violence, child abuse, school truancy, lower or lost productivity at work, lost jobs, and increased expenses in the health care and criminal justice systems.
The Substance Use Disorder (SUD) Services Division leads the effort to reduce alcoholism and drug addiction in California by developing, administering, and supporting prevention, treatment and recovery programs. We endeavor to help Californians understand that alcoholism and drug addiction are chronic conditions that can be successfully prevented and treated
If you, or someone you know, has a problem with alcohol or drugs, treatment services are available throughout California to help you get on the road to recovery. These range from emergency counseling and initial assessment to detoxification services and residential or long-term outpatient treatment.
Check Our State of California Page
Alcoholics Anonymous – AA Meetings in Stockton
|Stockton AA Office
Narcotics Anonymous – NA Meetings in Stockton
|Central Regional Office


text:
A story appeared this week in the Boston Globe that went largely unnoticed in SouthCoast: Two very, very expensive underwater LNG terminal facilities have sat idle for two years off the North Shore.
A story appeared this week in the Boston Globe that went largely unnoticed in SouthCoast: Two very, very expensive underwater LNG terminal facilities have sat idle for two years off the North Shore.
Now investors in this $750 million pair of white elephants have to try to figure out what to do with them — dismantle them or sit and wait until natural gas prices turn the United States into an LNG importer again.
Imagine, then, if former Fall River Mayor Edward Lambert hadn't led a crusade to stop the Hess/Weaver's Cove Energy plan to park a massive LNG terminal facility on the banks of the Taunton River.
Without dedicated opposition, especially by Lambert, local Congressmen Barney Frank and Jim McGovern and the local environmental group Green Futures, today we might be staring at an idle monstrosity that doesn't have the advantage of being out of sight beneath the ocean waves.
Joe Carvalho of Green Futures told me Thursday: "When they asked (Weaver's Cove CEO) Gordon Shearer if the local opposition had any influence on his decision (to end the project), he said 'Oh, no, not at all.'
"(But), of course, we did, because if we hadn't, they'd have been here."
What stopped Weaver's Cove in the end was the introduction of fracking in more than 30 states (but not New England). Fracking is a controversial hydraulic bedrock cracking that releases trapped gas deposits.
With a suddenly abundant domestic supply, prices have plummeted and imports virtually ceased.
Perhaps Shearer saw this coming in 2011 when he pulled the plug on the project. But if that's the case, perhaps he owes Weaver's Cove opponents a debt of gratitude for keeping him waiting long enough to escape investing hundreds of millions in a boondoggle and keep his executive job at Hess.
Neither Lambert nor current Fall River Mayor Will Flanagan returned my calls seeking comment on the LNG terminal shutdown north of Boston. But Carvalho said that there is, regrettably, a downside to this: The abundant supply comes at another kind of steep price, which is to say, the environment and our legacy.
"On the one hand, we're happy that the price of gas went down so far as to make these projects inoperable," he said.
"On the other hand, we're not really in favor of fracking" either.
He also said that perhaps the gas industry ought to think twice about this rapid exploitation of natural gas.
"It's like everything else, he said. "They want to export now (that) natural gas is being created here."
The bottom line, he said, is still money. Maybe future generations will be able to find some other energy source so we don't have to worry about what we do today."
These boom times will eventually end. Weaver's Cove's 73 acres are still owned by Hess. This story could be a long way from over.
Steve Urbon's column appears in The Standard-Times and at SouthCoastToday.com. He can be reached with comments or suggestions at 508-979-4448 or email@example.com.


text:
So many of you guys requested this lesson so here it is. "How to draw Steve from Minecraft", step by step. This is just another figure from the Minecraft game, and as you can see not much is different other than the colors and some additional changes like the facial hair. Even though Steve looks like a simple character to replicate, you might want to have a ruler handy when tackling this lesson on drawing Minecraft Steve. I will be back soon with more tuts. For those of you that requested this guy, have fun with it. Peace peeps.
DragoArt members upload artwork and drawing tutorials! They are also allowed to leave comments on tutorials, profiles, etc. Many more features, as well; it's way better than just being a boring guest! Register Now!


text:
Sign In
or Join Now!
Take a chance and prepare to do some work by PurpLev
Go to Pulse page »
©2020 Verticalscope Inc. All Rights Reserved. |
Terms of Service
| Copyright
| Privacy Policy
DISCLAIMER: Any posts on LJ are posted by individuals acting in their own right and do not necessarily reflect the views of LJ. LJ will not be held liable for the actions of any user.
Latest Projects |
Latest Blog Entries |
Latest Forum Topics


text:
- Access Digital Exclusives, Hit Shows, Live MotorSports and more!
- Ad Free - Stream Across Multiple Devices
- Cancel Anytime
Stay Updated Car news, reviews, and more!
$ 11,984
292 @ 6350
260 @ 4800
A four-door Challenger if there ever was one, the Dodge Charger enters 2014 with a potent base V-6, and a handful of good ol' fashioned V-8s. The base Charger is powered by a 3.6-liter V-6 that makes 292-hp and 260 lb-ft of torque. A five-speed automatic is standard, but we suggest spending a bit more money for the eight-speed automatic, which improves fuel economy and acceleration. The mid-level engine is a 5.7-liter V-8 making 363 hp and 394 lb-ft of torque, while the range-topper is the Charger SRT8's 6.4-liter 470 hp and 470 lb-ft of torque V-8. Both V-8s are paired to a five-speed automatic.
No matter if you opt for the V-6 or the V-8, the Charger is a good car. "The Charger's greatest attribute, however, is just how smooth it is," we wrote of a V-6-powered 2012 SXT, "The engine may well rival BMW's legendary inline-sixes, while the transmission's shifts are as seamless as they get. " We've also praised the high-zoot Charger SRT8, "The Charger [SRT8]'s dynamics are the most impressive part. Although its robust powertrain can get you in trouble on entry if you don't plan carefully (advice: brake early), this massive sedan takes to corners with composure, response, and communication that rivals — perhaps even bests — some notable German performance sedans."
The Charger doesn't receive any significant updates for 2014. There's a new Redline package on the V-6-powered Charger SXT, which acts as a V-6 performance package. It includes a minor horsepower bump, sport goodies, and aggressive-looking trim.
Like its Chrysler 300, and Dodge Challenger siblings, the Charger remains essentially unchanged for 2014. There's a new Redline package available on the Charger SXT, which adds sport suspension and steering, black chrome wheels, sport seats, and a minor horsepower bump from 292 hp to 300 hp.


text:
Samsung Droid Charge wallpapers
Ratings :
Click the stars to rate
240,527 Rated by :
73 user(s)
Click the stars to rate
- 1
- 2
- 3
- 4
- 5
240,527 Rated by :
73 user(s)
Retail Price: N/A
AP Price: N/A
AP Price: N/A
The Droid Charge is designed with Samsung's 4.3-inch Super AMOLED Plus display, setting a new touch screen standard for brightness, clarity and outdoor visibility. The Droid Charge is equipped with both a rear-facing 8 megapixel camera with LED flash and front-facing 1.3 megapixel camera for both stills and video chatting.
Top, New and Popular Wallpapers for Samsung Droid Charge. The collection of Free Wallpapers for Samsung Droid Charge right here to be download. We update the collection of Wallpapers daily.
Select Other Phone Model
Select Other Phone Model