RE: nmap 3.50 Oddity on FreeBSD 4.9-RELEASE

[Weiersmüller Mathias (KPFN 1) <mathias.weiersmueller () credit-suisse com>]

Is the network 10.51.55.0/25 directly connected, or is a entry in the routing table which has the address 10.51.55.0 as 
"first address" within the network? So this address is a "network number", and I suppose that FreeBSD 4.9 does not want 
to send packets towards the network number.

What happens when trying to ping or open a telnet towards 10.51.55.0?

Just my 5 cents...

Mathias Weiersmueller


> On Mar 20, 2004, at 12:24 AM, eric wrote:
> > Thinking that I'd get around the following problem, I switched my
> > attack host from OpenBSD to FreeBSD. However, when using the
> > following attack method...
> >
> > sudo nmap -sS -p '1-65535' -g 53 -oG foo.gnmap  -T 4 -iL foo.list
> >
> > I get the following..
> >
> > sendto in send_ip_raw: sendto(6, packet, 28, 0, 10.51.55.0, 16) =>
> > Can't assign requested address
> > Sleeping 15 seconds then retrying
> >
> > foo.list contains the following
> >
> > $ cat foo.list
> > 10.51.55.0/25
> > 172.16.0.0/18
> >
> > etc..
> >
> > This is on FreeBSD 4.9-RELEASE with all current patches and a
> > GENERIC kernel. If there's any more information you need, please let
> > me know. Note: doing a SYN scan against hosts doesn't cause this
> > problem, only using an input list.
>
> I am using a freebsd box to do a lot of scanning.  I seem to 
> remember a 
> problem depending on the security, where it would start blocking 
> packets after a certain threshold and I had to make some 
> changes to get 
> it to work.  I am not a bsd expert, and have not looked at in 
> a while, 
> so I can't remember what it was but I will see if I can find it.
>
>
> ---------------------------------------------------------------------
> For help using this (nmap-dev) mailing list, send a blank email to 
> nmap-dev-help () insecure org . List archive: http://seclists.org

---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List archive: http://seclists.org