Packages / nmap
APT repository · deb.freshdeb.com/nmapprinted 28 Oct 2026, 13:26 UTC
nmap
Nmap, the network scanner, for host discovery, port and service scans, OS detection and the scripting engine (NSE). With ncat, ndiff and the zenmap GUI. One release line for Debian 12 and 13, Ubuntu 22.04, 24.04 and 26.04 on amd64 and arm64.
latest 7.992nmap.orgupstream sourcepackaging
Componentmain
follows every upstream release, minors and majors included. Currently 7.992.
Not published yet. The first nmap release is being built. These commands will work once it lands at deb.freshdeb.com/nmap; the versions shown are the ones package.yaml will publish.
1Trust the signing key (once per machine)
sudo install -d -m 0755 /etc/apt/keyrings curl -fsSL https://deb.freshdeb.com/freshdeb-archive-keyring.gpg \ | sudo tee /etc/apt/keyrings/freshdeb-archive-keyring.gpg >/dev/null
Fingerprint 3BBD F03A 9C0B F890 F8CA 9510 7595 CC55 468F 3161. How to verify.
2Add the source
sudo tee /etc/apt/sources.list.d/freshdeb-nmap.sources >/dev/null <<EOF
Types: deb
URIs: https://deb.freshdeb.com/nmap
Suites: $(. /etc/os-release && echo $VERSION_CODENAME)
Components: main
Signed-By: /etc/apt/keyrings/freshdeb-archive-keyring.gpg
EOFWith auto, the shell reads the codename from /etc/os-release on the machine you paste this into.
3Install
sudo apt update && sudo apt install nmap
apt policy nmap # expect 7.992-1+freshdeb~…Before you upgrade from the distribution's nmap
The freshdeb version sorts higher, so apt upgrade moves you over in place. Some behaviour changed since the distributions' versions (jammy has 7.80). ncat no longer half-closes the connection when its input ends; -k brings that back. An ICMP host unreachable no longer marks a host down. nmap-update and the hostmap-bfk script are gone. Since 7.90 nmap is under the Nmap Public Source License. The package's NEWS entry lists it all.
Compared with Debian's package
Debian's packaging decides where things go: package names, paths, users, services and how upgrades behave. The build follows upstream's own release builds wherever Debian's differs.
- Source
- nmap.org's release tarball, which matches nmap.org's signed digest. Debian repacks it without the bundled libraries.
- Libraries
- Built against the distribution's libraries (libpcap, Lua, PCRE, libssh2, liblinear, zlib), as Debian builds it, so their security updates apply. On bookworm and jammy it uses its bundled libssh2, which needs 1.11.
- Build
- Debian's packaging and patches: CA certificates from
ca-certificatesand zenmap's root mode throughsu-to-root. Debian's patch for libdnet is dropped, since 7.992 has the fix. - Layout
- Debian's:
nmap,ncat,ndiffandzenmapas separate packages, the scripts and data innmap-common.
Packing list
Every release line of nmap and the distributions it's built for. Each line is its own APT component and only gets the releases it follows (main: every upstream release, minors and majors included). After upstream end of life it stops building but stays installable. Hatched cells have no build: usually that distribution already ships the same or a newer version itself.
| Line | Component | Current | bookwormDebian 12 | trixieDebian 13 | jammyUbuntu 22.04 | nobleUbuntu 24.04 | resoluteUbuntu 26.04 | Support |
|---|---|---|---|---|---|---|---|---|
| main | main | 7.992 | built: 7.992-1 | built: 7.992-1 | built: 7.992-1 | built: 7.992-1 | built: 7.992-1 | – |
Versions follow <upstream>-<revision>+freshdeb~<distro>, distro being deb12, deb13, ubuntu22.04, ubuntu24.04 or ubuntu26.04, for amd64 and arm64. Published versions are never rebuilt or replaced.
Contents
- nmap
- The scanner.
- nmap-common
- Scripts (NSE), service and OS fingerprints and other data.
- zenmap
- The graphical front end.
- ndiff
- Compares nmap scan results.
- ncat
- Netcat reimplementation, with TLS, proxies and connection brokering.
Origin
- Upstream
- github.com/nmap/nmaprelease tags pinned to commit hashes, built from the checksummed release tarball
- Debian packaging
- salsa.debian.org/pkg-security-team/nmapimported unmodified at 99d3579 (7.991+dfsg-1, unstable)
- Our changes
- Per-line quilt patches under
patches/, plus overlays underoverlays/for bookworm, trixie, jammy, noble, resolute. - Built for
- bookworm, trixie, jammy, noble, resoluteamd64, arm64, built natively
- Files
- package.yaml · debian/ · report an issuepackage.yaml explains every change
Also in Networking
- bgpq41.16BGP prefix and AS-path filter generator for IRR routing datamain
- frp0.71.1Reverse proxy to servers behind NAT, with the web dashboardsmain
- headscale0.29.6Self-hosted Tailscale control server, one line per minor0.29latest
- keepalived2.4.3VRRP failover and health checking for Linux Virtual Servermain
- unbound1.26.2Validating, recursive, caching DNS resolvermain
