Nmap Development mailing list archives

nmap doesn't work as root


From: Steven Thomas Smith <s.t.smith () ieee org>
Date: Sat, 21 Nov 2009 16:27:11 -0500

I've downloaded and compiled nmap 5.00 and have run into an old problem:
nmap doesn't run correctly a root. Compare nmap behavior as user to sudo:

[~]% *nmap 192.168.1.110*
Starting Nmap 5.00 ( http://nmap.org ) at 2009-11-21 16:14 EST
Warning: File ./nmap-services exists, but Nmap is using
/usr/local/share/nmap/nmap-services for security and consistency reasons.
set NMAPDIR=. to give priority to files in your local directory (may affect
the other data files too).
Interesting ports on 192.168.1.110:
Not shown: 994 closed ports
PORT     STATE SERVICE
22/tcp   open  ssh
111/tcp  open  rpcbind
139/tcp  open  netbios-ssn
445/tcp  open  microsoft-ds

*Nmap done: 1 IP address (1 host up) scanned in 0.12 seconds
*[~]% *sudo nmap 192.168.1.110*
Password:

Starting Nmap 5.00 ( http://nmap.org ) at 2009-11-21 16:14 EST
Warning: File ./nmap-services exists, but Nmap is using
/usr/local/share/nmap/nmap-services for security and consistency reasons.
set NMAPDIR=. to give priority to files in your local directory (may affect
the other data files too).
Warning: Unable to open interface vmnet8 -- skipping it.
Warning: Unable to open interface vmnet1 -- skipping it.
*Note: Host seems down. If it is really up, but blocking our ping probes,
try -PN
Nmap done: 1 IP address (0 hosts up) scanned in 0.26 seconds
*
For a history of this problem, see:
*
HAVE_IP_IP_SUM 0 doesn't work for root<http://seclists.org/nmap-dev/2006/q1/65>

[suse-security] 9.0 and
nmap<http://archives.neohapsis.com/archives/linux/suse/2003-q4/0754.html>
*

I've tried the trick of adding the line

#define HAVE_IP_IP_SUM 1


to nbase/nbase_config.h after ./config, but before make -- this didn't work
opn an OS X Snow Leopard build.

Any pointers to a fix to this problem would be appreciated.
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/


Current thread: