Re: nmap core dumps on FreeBSD/ARM 8.1

[Florian Klemenz <fok () gmx net>]

Hello Luis,

Here is the debug output:

# nmap 192.168.1.1 -d9

Starting Nmap 5.35DC1 ( http://nmap.org ) at 2010-11-02 18:07 CET
Fetchfile found /usr/local/share/nmap/nmap-services
PORTS: Using top 1000 ports found open (TCP:1000, UDP:0, SCTP:0)
The max # of sockets we are using is: 0
--------------- Timing report ---------------
  hostgroups: min 1, max 100000
  rtt-timeouts: init 1000, min 100, max 10000
  max-scan-delay: TCP 1000, UDP 1000, SCTP 1000
  parallelism: min 0, max 0
  max-retries: 10, host-timeout: 0
  min-rate: 0, max-rate: 0
---------------------------------------------
doing 0.0.0.0 = 192.168.1.1
Fetchfile found /usr/local/share/nmap/nmap-payloads
Initiating ARP Ping Scan at 18:07
Scanning 192.168.1.1 [1 port]
Packet capture filter (device mge0): arp and arp[18:4] = 0x0010751A
and arp[22:2] = 0xC801
Bus error (core dumped)

# nping 192.168.1.1 -d9
Nping will send packets at raw IP level

Starting Nping 0.5.35DC1 ( http://nmap.org/nping ) at 2010-11-02 18:07 CET
Resolving specified targets...
+-----------------TARGET-----------------+
Device Name:            mge0
Device FullName:        mge0
Device Type:            Ethernet
Directly connected?:    yes
Address family:         AF_INET
Resolved Hostname:
Supplied Hostname:      (null)
Target Address:         192.168.1.1
Source Address:         192.168.1.4
Next Hop Address:       192.168.1.1
Target MAC Address:     00:00:00:00:00:00
Source MAC Address:     00:10:75:c8:c8:01
Next Hop MAC Address:   00:00:00:00:00:00
1 target IP address determined.
Next target returned by getNextTarget(): Targets[0/1] --> 192.168.1.1

Blocking packets sent from current address 192.168.1.4 in BFP filter
BPF-filter: (not src host 192.168.1.4 and dst host 192.168.1.4) and
((icmp and icmp[icmptype] = 0) or (icmp and (icmp[icmptype] = 3 or
icmp[icmptype] = 4 or icmp[icmptype] = 5 or icmp[icmptype] = 11 or
icmp[icmptype] = 12)) )
Opening pcap device mge0
NSOCK (0.0000s) PCAP requested on device 'mge0' with berkeley filter
'(not src host 192.168.1.4 and dst host 192.168.1.4) and ((icmp and
icmp[icmptype] = 0) or (icmp and (icmp[icmptype] = 3 or icmp[icmptype]
= 4 or icmp[icmptype] = 5 or icmp[icmptype] = 11 or icmp[icmptype] =
12)) )' (promisc=0 snaplen=8192 to_ms=357913941) (IOD #1)
NSOCK (0.0000s) PCAP created successfully on device 'mge0'
(pcap_desc=5 bsd_hack=1 to_valid=1 l3_offset=14) (IOD #1)
Pcap device mge0 open successfully
Next target returned by getNextTarget(): Targets[0/1] --> 192.168.1.1

fillPacket(target=0x2052d200, port=0, buff=0xbffe7495, bufflen=65535,
filledlen=0xbfffe728 rawfd=3)
fillPacketICMP(target=0x2052d200, buff=0xbffe7495, bufflen=65535,
filledlen=0xbffe743c)
Bus error (core dumped)

I will try the svn version the next couple of days when I find the time.

Kind regards,
Florian Klemenz


On Tue, Nov 2, 2010 at 16:20, Luis MartinGarcia. <luis.mgarc () gmail com> wrote:
> Hi Florian,
>
> Thanks for reporting this. Could you please run nmap and nping with the
> debugging flag and post the output? You can run:
>
> nmap 192.168.1.1 -d9
> nping 192.168.1.1 -d9
>
> Also, it would be great if you could test the latest version from the
> SVN repo (command "svn co --username guest --password ""
> svn://svn.insecure.org/nmap/"  More info:
> http://nmap.org/book/install.html#inst-svn
>
> Regards,
>
> Luis MartinGarcia.
>
>
> On 11/01/2010 04:20 PM, Florian Klemenz wrote:
> > Hi,
> >
> > I just installed nmap from ports on FreeBSD/ARM 8.1, running on a
> > Seagate Dockstar (installed according to
> > http://cooltrainer.org/projects/freebsd-kirkwood/building/).
> >
> > Unfortunately both nmap and nping core dump with bus error:
> >
> > # nmap 192.168.1.1
> > Starting Nmap 5.35DC1 ( http://nmap.org ) at 2010-11-01 16:11 CET
> > Bus error (core dumped)
> >
> > # nping 192.168.1.1
> > Starting Nping 0.5.35DC1 ( http://nmap.org/nping ) at 2010-11-01 16:12 CET
> > Bus error (core dumped)
> >
> > Operating System:
> >
> > r# uname -a
> > FreeBSD fokstar.fokmo.de 8.1-RELEASE-p1 FreeBSD 8.1-RELEASE-p1 #1: Sun
> > Oct 31 22:59:19 CET 2010
> > fok () freebsd fokmo de:/usr/obj/arm/usr/src/sys/FOKSTAR  arm
> >
> > Could that be a problem with the ARM architecture?
> > Please CC me if you need further information, e.g. the core files, as
> > I am not subscribed to the mailing list.
> >
> > Kind regards,
> > Florian Klemenz
> > _______________________________________________
> > Sent through the nmap-dev mailing list
> > http://cgi.insecure.org/mailman/listinfo/nmap-dev
> > Archived at http://seclists.org/nmap-dev/
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/