Re: nmap and routing problems

[Peter Gordon <peter () pg-consultants com>]

Hi.

Here is the information you requested. As you can see, route -n is
empty, as is /proc/net/route. "ip route" apparently does not write
to /proc/net/route - on the other hand I don't know if or where it does
write to.

Peter

10.19.1.30:~# route
route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use
Iface
10.19.1.30:~# nmap -iflist
nmap -iflist

Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2009-02-19 10:13
IST
************************INTERFACES************************
DEV  (SHORT) IP/MASK        TYPE     UP MAC
lo   (lo)    127.0.0.1/8    loopback up
eth0 (eth0)  10.19.1.30/16  ethernet up 00:20:30:10:D8:9A
br0  (br0)   10.30.12.30/16 ethernet up 00:20:30:12:F5:CA

ROUTES: NONE FOUND(!)
10.19.1.30:~# route -n
route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use
Iface
10.19.1.30:~# cat /proc/net/route
cat /proc/net/route
Iface   Destination     Gateway         Flags   RefCnt  Use     Metric  Mask            MTU     Window
IRTT                                                       
10.19.1.30:~# ping -I eth0 10.10.10.71
ping -I eth0 10.10.10.71
PING 10.10.10.71 (10.10.10.71) from 10.19.1.30 eth0: 56(84) bytes of
data.
64 bytes from 10.10.10.71: icmp_seq=1 ttl=127 time=17.9 ms
64 bytes from 10.10.10.71: icmp_seq=2 ttl=127 time=0.483 ms
  C-c C-c^C
--- 10.10.10.71 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1014ms
rtt min/avg/max/mdev = 0.483/9.233/17.983/8.750 ms
10.19.1.30:~# nmap -e eth0 10.10.10.71
nmap -e eth0 10.10.10.71

Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2009-02-19 10:14
IST
sendto in send_ip_packet: sendto(6, packet, 28, 0, 10.10.10.71, 16) =>
Network is unreachable
Sleeping 15 seconds then retrying
  C-c C-ccaught SIGINT signal, cleaning up




On Wed, 2009-02-18 at 08:54 -0700, David Fifield wrote:
> On Wed, Feb 18, 2009 at 11:11:19AM +0200, Peter Gordon wrote:
> > I am using the latest nmap, nmap-4.85BETA3, on a Debian system, running
> > kernel 2.6.26.
> >
> > The setup is like this:
> >
> > I have several NICs on the computer, one of which is connected to the
> > network which I wish to inspect.
> >
> > There are no default routes in the default routing table. 
> >
> > All routing is performed with ip route
> >
> > Typically, "ip route list table all" gives 
> > 10.19.0.0/16            dev eth0  table eth0_table  scope link 
> > default via 10.19.1.254 dev eth0  table eth0_table 
> >
> > The "route" command has no entries.
> >
> > I can successfully ping using "ping -I"
> >
> > nmap fails, even with the -e option.
>
> Run Nmap with the -d option and send the exact error output. Also send
> the output of
>
>       nmap --iflist
>       route -n
>       cat /proc/net/route
>
> You may obscure any identifying information if you wish. Nmap uses
> /proc/net/route if available so we'll have to see if that file agress
> with the rest of your configuration.
>
> David Fifield
>
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://SecLists.Org


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org