OSX & FreeBSD ARP scan problem

[Jon Schipp <jonschipp () gmail com>]

I apologize if this mail message is not appropriate for this list.

Are there known issues when doing ARP based host discovery from FreeBSD
and/or OSX systems?

When I'm scanning my local network(targets on same segment), on Linux, nmap
defaults to the ARP scan like normal for determining whether a host is
alive.
However, when I use FreeBSD or OSX 10.6 (only hosts I've tried) on the same
network, it skips the ARP scan and jumps into the normal Ping scan.

When I specify -PR for host discovery Nmap immediately reports that all
hosts are down without sending out any traffic.

I've verified all output with --reason, --packet-trace, and with tcpdump.

FYI: Both systems have multiple NIC's, I've tried setting the NIC with -e
<interface> and it still does the same thing.

I'm using 5.51 on FreeBSD and on OSX.

I was just curious to whether this was some BSD-"like" implementation issue
or maybe I'm just doin' it wrong.

Thanks
Jon
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/