Nmap Development mailing list archives

Re: Nmap 3.93: Spoof mac does not work when network card not in promiscious mode


From: Greg Darke <starstuff () optusnet com au>
Date: Wed, 14 Sep 2005 22:43:28 +1000

Just a follow up on the message I sent earlier,

It seems that this is not the whole story... This problem only seems to
come up when I have previously changed my mac address on my network
card. 

spoof_mac works without a problem, if I don't change any settings on my
network card. But if i change the mac address (I need to so that I can
use it on the network at Uni), Nmap is not able to see any packets that
come back to the spoofed mac address unless I place the network card
into promiscuous mode.

Is anybody else having the same problem, or is it a bug with my network
card?

Greg

On Wed, 2005-09-14 at 12:20 +1000, Greg Darke wrote:
Hi list,

I have just been playing around with the version 3.93 of Nmap, and
discovered that when you run a scan with the '--spoof_mac 0' option, it
is only able to scan itself. Then when I started up ethereal to see what
was (or wasn't) happening, Nmap started to see all of the remote hosts
and correctly scanning them.

This could also be the reason why the arp scan with spoof mac enabled
doesn't work correctly.

I am running Linux (Fedora Core 4). My kernel version is 2.6.12-1.1390,
I am using a Marvell 88E8036 Fast Ethernet Controller (using the sk98lin
driver).

Greg


--=-/22p3CwULnrbSdRSOEHv--


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev

Current thread: