Metasploit mailing list archives

Strange results using auxiliary/scanner/portscan/syn and routing via Meterpreter


From: wfdawson <wfdawson () bellsouth net>
Date: Tue, 23 Mar 2010 21:21:52 -0700 (PDT)

I start off with a compromised host.  I execute a Meterpreter payload .exe created with msfpayload / msfencode, and 
establish a connection back to my pen testing host.  I determine the locally routed networks, background the session, 
and configure a route, e.g.:

route add 172.18.0.0 255.255.0.0 1

Then, I use auxiliary/scanner/portscan/syn, set PORTS 80 and RHOSTS to the target network or host.  I've tried it both 
ways.  Either way, I get no results, even when there are web servers on the target networks or IP addresses.  However, 
in my syslog, I see USB messages logged when I start the scan.  The messages only occur when I do a scan this way.  
What might be causing this?

Mar 24 00:18:18 wdawsonlt kernel: [21242.903636] usb usb1: usb auto-resume
Mar 24 00:18:18 wdawsonlt kernel: [21242.903643] ehci_hcd 0000:00:1a.7: resume root hub
Mar 24 00:18:18 wdawsonlt kernel: [21242.944048] hub 1-0:1.0: hub_resume
Mar 24 00:18:18 wdawsonlt kernel: [21242.944339] hub 1-0:1.0: state 7 ports 4 chg 0000 evt 0000
Mar 24 00:18:18 wdawsonlt kernel: [21242.951720] usb usb4: usb auto-resume
Mar 24 00:18:18 wdawsonlt kernel: [21242.951724] usb usb4: wakeup_rh
Mar 24 00:18:18 wdawsonlt kernel: [21242.983058] hub 4-0:1.0: hub_resume
Mar 24 00:18:18 wdawsonlt kernel: [21242.983340] hub 4-0:1.0: state 7 ports 2 chg 0000 evt 0000
Mar 24 00:18:18 wdawsonlt kernel: [21242.990518] usb usb6: usb auto-resume
Mar 24 00:18:18 wdawsonlt kernel: [21242.990521] usb usb6: wakeup_rh
Mar 24 00:18:18 wdawsonlt kernel: [21243.022269] hub 6-0:1.0: hub_resume
Mar 24 00:18:18 wdawsonlt kernel: [21243.022540] hub 6-0:1.0: state 7 ports 2 chg 0000 evt 0000
Mar 24 00:18:19 wdawsonlt kernel: [21244.000134] usb usb4: suspend_rh (auto-stop)
Mar 24 00:18:19 wdawsonlt kernel: [21244.250136] usb usb6: suspend_rh (auto-stop)
Mar 24 00:18:20 wdawsonlt kernel: [21244.997118] hub 1-0:1.0: hub_suspend
Mar 24 00:18:20 wdawsonlt kernel: [21244.997128] usb usb1: bus auto-suspend
Mar 24 00:18:20 wdawsonlt kernel: [21244.997132] ehci_hcd 0000:00:1a.7: suspend root hub
Mar 24 00:18:20 wdawsonlt kernel: [21244.997160] hub 4-0:1.0: hub_suspend
Mar 24 00:18:20 wdawsonlt kernel: [21244.997165] usb usb4: bus auto-suspend
Mar 24 00:18:20 wdawsonlt kernel: [21244.997169] usb usb4: suspend_rh
Mar 24 00:18:20 wdawsonlt kernel: [21245.385531] usb usb1: usb auto-resume
Mar 24 00:18:20 wdawsonlt kernel: [21245.385537] ehci_hcd 0000:00:1a.7: resume root hub
Mar 24 00:18:20 wdawsonlt kernel: [21245.426148] hub 1-0:1.0: hub_resume
Mar 24 00:18:20 wdawsonlt kernel: [21245.426202] hub 1-0:1.0: state 7 ports 4 chg 0000 evt 0000
Mar 24 00:18:20 wdawsonlt kernel: [21245.433757] usb usb4: usb auto-resume
Mar 24 00:18:20 wdawsonlt kernel: [21245.433761] usb usb4: wakeup_rh
Mar 24 00:18:20 wdawsonlt kernel: [21245.465087] hub 4-0:1.0: hub_resume
Mar 24 00:18:20 wdawsonlt kernel: [21245.465356] hub 4-0:1.0: state 7 ports 2 chg 0000 evt 0000
Mar 24 00:18:21 wdawsonlt kernel: [21246.500158] usb usb4: suspend_rh (auto-stop)
Mar 24 00:18:23 wdawsonlt kernel: [21247.997205] hub 1-0:1.0: hub_suspend
Mar 24 00:18:23 wdawsonlt kernel: [21247.997215] usb usb1: bus auto-suspend
Mar 24 00:18:23 wdawsonlt kernel: [21247.997219] ehci_hcd 0000:00:1a.7: suspend root hub
Mar 24 00:18:23 wdawsonlt kernel: [21247.997247] hub 4-0:1.0: hub_suspend
Mar 24 00:18:23 wdawsonlt kernel: [21247.997265] usb usb4: bus auto-suspend
Mar 24 00:18:23 wdawsonlt kernel: [21247.997270] usb usb4: suspend_rh
Mar 24 00:18:23 wdawsonlt kernel: [21247.997296] hub 6-0:1.0: hub_suspend
Mar 24 00:18:23 wdawsonlt kernel: [21247.997300] usb usb6: bus auto-suspend
Mar 24 00:18:23 wdawsonlt kernel: [21247.997302] usb usb6: suspend_rh
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework

Current thread: