Nmap Development mailing list archives

Re: Choosing appropiate src ip address


From: Tal Kelrich <tal () musicgenome com>
Date: Mon, 10 Jul 2006 10:44:55 +0300

On Sun, 09 Jul 2006 17:23:42 +0200
SuD <sud_NOSPAM () latinsud com> wrote:

For example, if i have this configuration:

eth1      Link encap:Ethernet
          inet addr:192.168.0.33  Bcast:192.168.0.255
Mask:255.255.255.0

eth1:1    Link encap:Ethernet
          inet addr:192.168.1.36  Bcast:192.168.1.255
Mask:255.255.255.0

And i try nmap -n -sP 192.168.1.1, i get no reply, nmap cannot ping
it. When i take a closer look with tcpdump i see that it is sending
from 192.168.0.33 to 192.168.1.1, which won't work, as it should have
choosen 192.168.1.36 as src address.


Both your interfaces are on the same subnet, nmap using 192.168.0.33
is legitimate, check your netmasks?

-- 
Tal Kelrich
PGP fingerprint: 3EDF FCC5 60BB 4729 AB2F  CAE6 FEC1 9AAC 12B9 AA69
Key Available at: http://www.hasturkun.com/pub.txt
----
signal(i,
SIG_DFL); /bin /boot /dev /etc /home /lib /lost+found /media /misc /mnt /net /opt /proc /root /sbin /selinux /smb /srv 
/sys /tmp /usr /var
crunch, crunch, crunch */ -- Larry Wall in doarg.c from the perl source
code ----


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev

Current thread: