Nmap Development mailing list archives

Re: -NP ignored when running as root


From: Brandon Enright <bmenrigh () ucsd edu>
Date: Fri, 17 Jul 2009 00:26:08 +0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, 16 Jul 2009 20:22:04 -0400
Mike Calmus <mcalmus () nyx net> wrote:

Hi, please try running again as root, this time with the --send-ip
option. That will disable the ARP ping. If that works, then there is
something wrong with the way ARP ping work against Windows 7 and
possibly Solaris 10.

http://seclists.org/nmap-dev/2009/q1/0176.html

That was caused by Solaris sending back ARP replies to the broadcast
Ethernet address. If --send-ip works for you, please let us know. If
you could get a packet capture of the ARP traffic, that would be very
helpful.

Please let us know, because this is something that can be fixed with
a little more information.

David Fifield

Using the --send-ip option does seem to work. I won't be able to get 
a packet capture until later, though. I will forward that along as 
soon as I can.


Hey Mike, are you by any chance connecting to a wireless AP with client
isolation turned on?  In addition to a packet capture, the output of
"arp -a" after a scan could be moderately useful.

Brandon

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.11 (GNU/Linux)

iEYEARECAAYFAkpfxS0ACgkQqaGPzAsl94IcdwCgpOqUZYYr7Pb07S6K3UHn/oon
lvgAoKE78u7kJGmUOC/XfDMbz2iOyg3d
=eCR+
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org


Current thread: