Re: nmap and routing problems

[David Fifield <david () bamsoftware com>]

On Thu, Feb 19, 2009 at 08:38:42PM +0200, Peter Gordon wrote:
> Progress has been made !
>
> I ran the latest version of nmap -4.85BETA3:
> ./nmap -e eth0 --unprivileged 10.10.10.71
> and received the message "Host seems down".
>
> The problem is with the socket connection. The -e flag doesn't seem to 
> be doing anything. What it should be doing is a bind to the IP of the
> requested port. 
>
> Without -e option
> connect(3, {sa_family=AF_INET, sin_port=htons(80),
> sin_addr=inet_addr("10.10.10.71")}, 16) = -1 ENETUNREACH (Network is
> unreachable)
>
> With -e option
> connect(3, {sa_family=AF_INET, sin_port=htons(80),
> sin_addr=inet_addr("10.10.10.71")}, 16) = -1 ENETUNREACH (Network is
> unreachable)

I'm surprised you can create any kind of socket connection at all. ping
might be a special case because it uses raw sockets. Are you able to
make a connection with Ncat?

        ncat 10.10.10.71 80
        ncat -s 10.19.1.30 10.10.10.71 80

Even if port 80 is not open, you should get back a "connection refused"
or "connection timeout", not "network is unreachable". Try running
strace with those commands and see what happens.

David Fifield

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org