Re: Bug (same but different) Solaris 8, 4.85BETA4 localhost scan.

[David Fifield <david () bamsoftware com>]

On Sun, Mar 29, 2009 at 10:20:19AM +0000, Dom De Vitto wrote:
> If you recall the well-known:
> 'Scanning an IP that is an interface address on a Solaris (8) box doesn't
> work except with -sT scanning.' issue,
>
> well it looks like the symptom has changed:
> [ Solaris-8-box ]# nmap -sS -p 1  1.2.3.4
>
> Starting Nmap 4.85BETA4 ( http://nmap.org ) at 2009-03-29 11:12 BST
> pcap_open_live(lo0, 100, 0, 200) FAILED. Reported error: lo0: No DLPI device
> found.  Will wait 5 seconds then retry.
> pcap_open_live(lo0, 100, 0, 200) FAILED. Reported error: lo0: No DLPI device
> found.  Will wait 25 seconds then retry.
> Call to pcap_open_live(lo0, 100, 0, 200) failed three times. Reported error:
> lo0: No DLPI device found
> There are several possible reasons for this, depending on your operating
> system:
> LINUX: If you are getting Socket type not supported, try modprobe af_packet
> or recompile your kernel with SOCK_PACKET enabled.
> *BSD:  If you are getting device not configured, you need to recompile your
> kernel with Berkeley Packet Filter support.  If you are getting No such file
> or directory, try creating the device (eg cd /dev; MAKEDEV <device>; or use
> mknod).
> *WINDOWS:  Nmap only supports ethernet interfaces on Windows for most
> operations because Microsoft disabled raw sockets as of Windows XP SP2.
> Depending on the reason for this error, it is possible that the
> --unprivileged command-line argument will help.
> SOLARIS:  If you are trying to scan localhost and getting '/dev/lo0: No such
> file or directory', complain to Sun.  I don't think Solaris can support
> advanced localhost scans.  You can probably use "-PN -sT localhost" though.
>
> Or maybe this is another bug?  Either way, I guess the diagnostic could do
> with updating (or broadening by removing 'and getting...direcotory'"  ?

Thanks for the suggestion. I updated the error message to include the
new error. Maybe the old one ("No such file or directory") isn't used
anymore? We had a "No DLPI device found" report in 2006:
        http://seclists.org/nmap-dev/2006/q2/0127.html

David Fifield

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org