Re: Can not use Syn-scan or any root scan with MacOSX 10.4.11, Nmap 4.76

[David Fifield <david () bamsoftware com>]

On Sat, Nov 29, 2008 at 09:59:24AM -0700, David Fifield wrote:
> On Sat, Nov 29, 2008 at 12:16:43AM -0500, Myshkin LeVine wrote:
> >              I am using Nmap v4.76 on MacOSX 10.4.11. I searched the  
> > mailing-list archives and found several reports of my kind of problem, 
> > but did not find any solution. When running nmap I cannot use the 
> > Syn-scan nor run any scan as root. When I try the Syn-scan I get an error 
> > message: "WARNING: Unable to find appropriate interface for system route 
> > to 10.5.67.1" That address is my router/DSL modem. I can however run 
> > scans as root when scanning localhost.
> >             After reading all the related posts I see that  
> > troubleshooters will ask for the output of both nmap --iflist & ifconfig 
> > -a. I have seen other posters offer also the output of netstat -rn so 
> > below is the output of all 3 of those commands:
>
> Thanks for this thorough report. I think I see what is going on. Nmap is
> trying to figure out which interface each route belongs to.
>
> The trick is that while the default route can't be directly matched to
> an interface, it goes through another route associated with ppp0. So it
> seems we need more than a one-step matching of routes to interfaces.
> Each route also has to look at other routes to see if it can pick up an
> interface through one of them.

I wrote a fix for this in r11591. If you're building from Subversion,
would you update and let me know if it works? The same goes for anyone
who has seen the "Unable to find appropriate interface for system route"
warning. It seems to be especially common using PPP on Mac OS X.

David Fifield

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org