Nmap Development mailing list archives

Re: Choosing appropiate src ip address


From: SuD <sud_NOSPAM () latinsud com>
Date: Mon, 10 Jul 2006 21:22:25 +0200

Ok, nmap-2.40-ALPHA4 works as expected, i assume my version 3.81-1 
(sarge) was really outdated...

Danny Miller wrote:

On Jul 9, 2006, at 11:23 AM, SuD wrote:

Hi, i'm using nmap 3.81 (debian sarge, kernel 2.6.15.6) and i have a
problem when i have several ip addresses on interface.

For example, if i have this configuration:

eth1      Link encap:Ethernet
          inet addr:192.168.0.33  Bcast:192.168.0.255  Mask: 
255.255.255.0

eth1:1    Link encap:Ethernet
          inet addr:192.168.1.36  Bcast:192.168.1.255  Mask: 
255.255.255.0

And i try nmap -n -sP 192.168.1.1, i get no reply, nmap cannot ping  it.
When i take a closer look with tcpdump i see that it is sending from
192.168.0.33 to 192.168.1.1, which won't work, as it should have  
choosen
192.168.1.36 as src address.


What's your route table look like?  If your default route is over  
192.168.0.1 and there's no specific entry for addresses in the  
192.168.1.1 range then it'll pick the .0.33 address every time.

Danny




_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev


Current thread: