nmap: cleanup