Re: nmap 5.21, OS X 10.6.2 - doesn't work as root

[Walt Scrivens <walts () gate net>]

On my 10.6.3, nmap 5.21 works OK but 5.30 BETA bombs:

Walt

sh-3.2# nmap -n -vvv -PN 192.168.1.149

Starting Nmap 5.21 ( http://nmap.org ) at 2010-04-06 16:12 EDT
Warning: File ./nmap-services exists, but Nmap is using /usr/local/share/nmap/nmap-services for security and 
consistency reasons.  set NMAPDIR=. to give priority to files in your local directory (may affect the other data files 
too).
Warning: Unable to open interface vmnet1 -- skipping it.
Warning: Unable to open interface vmnet8 -- skipping it.
Initiating ARP Ping Scan at 16:12
Scanning 192.168.1.149 [1 port]
Completed ARP Ping Scan at 16:12, 0.10s elapsed (1 total hosts)
Initiating SYN Stealth Scan at 16:12
Scanning 192.168.1.149 [1000 ports]
Discovered open port 554/tcp on 192.168.1.149
Discovered open port 445/tcp on 192.168.1.149
Discovered open port 135/tcp on 192.168.1.149
Discovered open port 139/tcp on 192.168.1.149
Discovered open port 2869/tcp on 192.168.1.149
Discovered open port 10243/tcp on 192.168.1.149
Discovered open port 5357/tcp on 192.168.1.149
Completed SYN Stealth Scan at 16:12, 16.88s elapsed (1000 total ports)
Nmap scan report for 192.168.1.149
Host is up (0.017s latency).
Scanned at 2010-04-06 16:12:03 EDT for 17s
Not shown: 993 filtered ports
PORT      STATE SERVICE
135/tcp   open  msrpc
139/tcp   open  netbios-ssn
445/tcp   open  microsoft-ds
554/tcp   open  rtsp
2869/tcp  open  unknown
5357/tcp  open  unknown
10243/tcp open  unknown
MAC Address: 00:12:17:66:6A:C2 (Cisco-Linksys)

Read data files from: /usr/local/share/nmap
Nmap done: 1 IP address (1 host up) scanned in 17.27 seconds
           Raw packets sent: 2997 (131.866KB) | Rcvd: 18 (790B)
sh-3.2# ./nmap -n -vvv -PN 192.168.1.149

Starting Nmap 5.30BETA1 ( http://nmap.org ) at 2010-04-06 16:13 EDT
Warning: File ./nmap-services exists, but Nmap is using /usr/local/share/nmap/nmap-services for security and 
consistency reasons.  set NMAPDIR=. to give priority to files in your local directory (may affect the other data files 
too).
Warning: Unable to open interface vmnet1 -- skipping it.
Warning: Unable to open interface vmnet8 -- skipping it.
Initiating SYN Stealth Scan at 16:13
Scanning 192.168.1.149 [1000 ports]

sh-3.2# ./nmap --iflist

Starting Nmap 5.30BETA1 ( http://nmap.org ) at 2010-04-06 16:15 EDT
Warning: Unable to open interface vmnet1 -- skipping it.
Warning: Unable to open interface vmnet8 -- skipping it.
************************INTERFACES************************
DEV (SHORT) IP/MASK          TYPE     UP MAC
lo0 (lo0)   127.0.0.1/8      loopback up
en1 (en1)   192.168.1.144/24 ethernet up 00:23:6C:99:EB:B1

**************************ROUTES**************************
DST/MASK           DEV GATEWAY
224.0.0.251/32     en1 192.168.1.1
74.125.113.121/32  en1 192.168.1.1
63.245.209.93/32   en1 192.168.1.1
64.147.188.87/32   en1 192.168.1.1
64.210.100.8/32    en1 192.168.1.1
64.210.100.35/32   en1 192.168.1.1
64.210.100.51/32   en1 192.168.1.1
64.210.100.66/32   en1 192.168.1.1
67.205.25.231/32   en1 192.168.1.1
69.25.195.202/32   en1 192.168.1.1
69.59.196.211/32   en1 192.168.1.1
72.14.204.102/32   en1 192.168.1.1
72.247.189.15/32   en1 192.168.1.1
74.125.91.118/32   en1 192.168.1.1
17.151.16.23/32    en1 192.168.1.1
74.125.115.191/32  en1 192.168.1.1
74.125.161.22/32   en1 192.168.1.1
127.0.0.1/32       lo0 127.0.0.1
151.132.206.128/32 en1 192.168.1.1
174.36.96.24/32    en1 192.168.1.1
192.168.1.144/32   lo0 127.0.0.1
207.69.200.149/32  en1 192.168.1.1
208.46.17.163/32   en1 192.168.1.1
208.159.115.3/32   en1 192.168.1.1
212.58.226.143/32  en1 192.168.1.1
127.0.0.0/8        lo0 127.0.0.1
0.0.0.0/0          en1 192.168.1.1

sh-3.2# netstat -rn
Routing tables

Internet:
Destination        Gateway            Flags        Refs      Use   Netif Expire
default            192.168.1.1        UGSc           23        0     en1
127                127.0.0.1          UCS             0        0     lo0
127.0.0.1          127.0.0.1          UH              1       94     lo0
169.254            link#6             UCS             0        0     en1
192.168.1          link#6             UCS             5        0     en1
192.168.1.1        0:f:66:3e:98:eb    UHLWI          38     3299     en1   1155
192.168.1.100      aa:0:4:0:a:4       UHLWI           0      858     en1    528
192.168.1.107      0:26:b0:41:43:cb   UHLWI           0        0     en1    292
192.168.1.136      0:1b:63:f5:3e:a9   UHLWI           0   171965     en1    176
192.168.1.144      127.0.0.1          UHS             0        0     lo0
192.168.1.149      0:12:17:66:6a:c2   UHLWI           0     3605     en1   1068
192.168.97         link#8             UC              0        0  vmnet1
192.168.246        link#9             UC              0        0  vmnet8

Internet6:
Destination                             Gateway                         Flags         Netif Expire
::1                                     ::1                             UH              lo0
fe80::%lo0/64                           fe80::1%lo0                     Uc              lo0
fe80::1%lo0                             link#1                          UHL             lo0
ff01::/32                               ::1                             Um              lo0
ff02::/32                               ::1                             UmC             lo0
sh-3.2# 

On Apr 6, 2010, at 3:35 PM, Patrik Karlsson wrote:

> Hi,
>
> Did you manage to sort this out? I'm having the same problem on 10.6.3.
> David, I'm sending you the output off-list.
[SNIP}
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/