Nmap Development mailing list archives

Re: Choosing appropiate src ip address


From: kx <kxmail () gmail com>
Date: Mon, 10 Jul 2006 06:49:11 -0400

3.81 is a little old. In version 3.84, nmap started using dnet and the
whole infrastructure was overhauled.  I highly recommend grabbing
nmap-4.20ALPHA4 from http://www.insecure.org/nmap/dist/?C=M&O=D

Let us know if you still have the problem.

Cheers,
  kx

On 7/9/06, SuD <sud_NOSPAM () latinsud com> wrote:
Hi, i'm using nmap 3.81 (debian sarge, kernel 2.6.15.6) and i have a
problem when i have several ip addresses on interface.

For example, if i have this configuration:

eth1      Link encap:Ethernet
         inet addr:192.168.0.33  Bcast:192.168.0.255  Mask:255.255.255.0

eth1:1    Link encap:Ethernet
         inet addr:192.168.1.36  Bcast:192.168.1.255  Mask:255.255.255.0

And i try nmap -n -sP 192.168.1.1, i get no reply, nmap cannot ping it.
When i take a closer look with tcpdump i see that it is sending from
192.168.0.33 to 192.168.1.1, which won't work, as it should have choosen
192.168.1.36 as src address.

# tcpdump -n
17:10:38.059336 IP 192.168.0.33 > 192.168.1.1: ICMP echo request, id
32944, seq 21607, length 8
17:10:38.059507 IP 192.168.0.33.37145 > 192.168.1.1.80: . ack 2472138014
win 4096

Shouldn't nmap autochoose interface and/or src address? Is my version
too old?
Thanks



_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev



_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev


Current thread: