Re: Who is testing the new Nmap IPv6 support

[Brandon Enright <bmenrigh () ucsd edu>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mon, 13 Jun 2011 12:46:14 -0700
David Fifield <david () bamsoftware com> wrote:

> Can you tell if Nmap is using the correct source address and
> interface? Does it work if you force it with -S and -e?

I ran into a bug with the interface determination code in
route_dst_netlink() somehow leaking file handles and running the box out.

In short:

$ sudo ./nmap --datadir . 128.54.0.0/20 
Starting Nmap 5.52.IPv6.Beta2 ( http://nmap.org ) at 2011-06-13 19:49 UTC
route_dst_netlink: cannot create AF_NETLINK socket: Too many open files


But using a /24 works just fine.  To get around this I have to specify
the interface with -e.

Interestingly, I only run into the issue when I use certain netblocks.
For example, this works:

sudo ./nmap --datadir . 132.239.0.0/20


This might have something to do with my route table having some of
132.239 in it:

route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
132.239.1.112   0.0.0.0         255.255.255.240 U     0      0        0 eth6
169.254.0.0     0.0.0.0         255.255.0.0     U     0      0        0 eth2
169.254.0.0     0.0.0.0         255.255.0.0     U     0      0        0 eth3
169.254.0.0     0.0.0.0         255.255.0.0     U     0      0        0 eth4
169.254.0.0     0.0.0.0         255.255.0.0     U     0      0        0 eth5
169.254.0.0     0.0.0.0         255.255.0.0     U     0      0        0 eth7
127.0.0.0       0.0.0.0         255.0.0.0       U     0      0        0 lo
0.0.0.0         132.239.1.113   0.0.0.0         UG    0      0        0 eth6


I haven't had a chance to track the issue down though.

I will try some basic IPv6 tests as soon as I can make time.


Brandon

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (GNU/Linux)

iEYEARECAAYFAk32a0kACgkQqaGPzAsl94K4SQCfVN5+jkkSNs7jS8zoPejL20Ho
c3kAmwQY0+LUnEwhhx47mUhLqp6odGrm
=fVnk
-----END PGP SIGNATURE-----
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/