Nmap Development mailing list archives

nmap 4.11 + OpenBSD Kernel PPPOE = strange error


From: Rembrandt <rembrandt () jpberlin de>
Date: Fri, 21 Jul 2006 19:31:07 +0200 (CEST)

Hello everybody,

I got a new (faster) DSL line so I switched from userland pppoe to
kernel pppoe (using OpenBSD 3.9 STABLE).

I noticed that nmap has a strange Bug (well I suspect nmap is the
source of evil here) :)


At first I tried to do a SYN-Scan and after that I simple used a
3-Way-handshake.
There`s NO Firewall blocking anything and I connected this Box directly
to the Internet (so no Router either).


Script started on Sat Aug 26 18:20:25 2006
godfather $ sudo nmap -sS -P0 -sS -vvv -p80,443 www.emirates.com

Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2006-08-26
18:20 CEST WARNING: Unable to find appropriate interface for system
route to 0.0.0.1

WARNING: Unable to find appropriate interface for system route to
0.0.0.0

nexthost: failed to determine route to 83.231.138.225
QUITTING!
godfather $ sudo nmap -sV -P0 -sT -vvv -p80,443 www.emirates.com 

Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2006-08-26
18:21 CEST DNS resolution of 1 IPs took 0.02s.
Initiating Connect() Scan against eua0000060-vip1.eu.verio.net
(83.231.138.225) [2 ports] at 18:21 Discovered open port 80/tcp on
83.231.138.225 Discovered open port 443/tcp on 83.231.138.225
The Connect() Scan took 0.04s to scan 2 total ports.
Initiating service scan against 2 services on
eua0000060-vip1.eu.verio.net (83.231.138.225) at 18:21 The service scan
took 106.20s to scan 2 services on 1 host. Host
eua0000060-vip1.eu.verio.net (83.231.138.225) appears to be up ...
good. Interesting ports on eua0000060-vip1.eu.verio.net
(83.231.138.225): PORT    STATE SERVICE     VERSION 80/tcp  open
http        Microsoft IIS httpd 443/tcp open  ssl/unknown
1 service unrecognized despite returning data. If you know the
service/version, please submit the following fingerprint at
http://www.insecure.org/cgi-bin/servicefp-submit.cgi :
SF-Port443-TCP:V=4.11%T=SSL%I=7%D=8/26%Time=44F07504%
P=x86_64-unknown-openbsd3.9%r(GetRequest,DB,"HTTP/1\.1\x20400\x20Bad
\x20Request\r\nContent-Type: SF:\x20text/html\r\nDate:\x20Fri,\x2021
\x20Jul\x202006\x2017:17:34\x20GMT\ SF:r\nConnection:\x20close\r
\nContent-Length:\x2039\r\nVia:\x201\.1\x2083\ SF:.231\.138\.225\x20
\(Alteon\x20iSD-SSL/4\.2\.1\.23\)\r\n\r\n<h1>Bad\x20R SF:equest\x20
\(Invalid\x20Hostname\)</h1>")%r(HTTPOptions,DB,"HTTP/1\.1\x2 SF:0400
\x20Bad\x20Request\r\nContent-Type:\x20text/html\r\nDate:\x20Fri,\x
SF:2021\x20Jul\x202006\x2017:22:06\x20GMT\r\nConnection:\x20close\r
\nConte SF:nt-Length:\x2039\r\nVia:\x201\.1\x2083\.231\.138\.225\x20
\(Alteon\x20iS SF:D-SSL/4\.2\.1\.23\)\r\n\r\n<h1>Bad\x20Request\x20
\(Invalid\x20Hostname\ SF:)</h1>")%r(FourOhFourRequest,DB,"HTTP/1\.1
\x20400\x20Bad\x20Request\r\n SF:Content-Type:\x20text/html\r\nDate:
\x20Fri,\x2021\x20Jul\x202006\x2017: SF:18:25\x20GMT\r\nConnection:
\x20close\r\nContent-Length:\x2039\r\nVia:\x SF:201\.1\x2083\.231\.138
\.225\x20\(Alteon\x20iSD-SSL/4\.2\.1\.23\)\r\n\r\ SF:n<h1>Bad\x20Request
\x20\(Invalid\x20Hostname\)</h1>");

Nmap finished: 1 IP address (1 host up) scanned in 106.429 seconds
godfather $ ^D

I never had any problems as I used userland PPPoE but also just nmap
has Problems with the Kernel PPPoE.

Any solutions for this?
I asked (mailed) already the OpenBSD Port-Maintainer but I got no reply.


Kind regards,
Rembrandt


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev

Current thread: