Re: dhcp script!

[David Fifield <david () bamsoftware com>]

On Wed, Sep 09, 2009 at 03:59:37PM -0400, Walt Scrivens wrote:
> On Sep 9, 2009, at 2:13 AM, David Fifield wrote:
> > Are you running Snow Leopard? We had another report that ARP pings
> > weren't working.
> >
> > http://seclists.org/nmap-dev/2009/q3/0827.html
> >
> > Try getting a full packet capture of the following commands.
> >
> > sudo arp -d 192.168.1.1
> > sudo nmap -sP --send-ip 192.168.1.1
>
> Here's the output.  It looks OK to me, unless I'm missing something?
>
> **************
> TestComputer:~ walts$ sudo arp -d 192.168.1.1
> Password:
> 192.168.1.1 (192.168.1.1) deleted
> TestComputer:~ walts$ sudo nmap -sP --send-ip 192.168.1.1
>
> Starting Nmap 5.00 ( http://nmap.org ) at 2009-09-09 15:52 EDT
> Warning: Unable to open interface vmnet8 -- skipping it.
> Warning: Unable to open interface vmnet1 -- skipping it.
> Host 192.168.1.1 is up (0.0028s latency).
> MAC Address: 00:0F:66:3E:98:EB (Cisco-Linksys)
> Nmap done: 1 IP address (1 host up) scanned in 0.34 seconds
> TestComputer:~ walts$
> *************

That looks right, but what I want is a pcap/tcpdump traffic capture like
you sent before. What I'm looking for is the ARP packets sent by the
operating system.

Is this on Snow Leopard?

David Fifield

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org