Re: 'nmap -S <src_addr>' does not use 'iproute2' alternate routing table

[David Fifield <david () bamsoftware com>]

On Tue, Sep 11, 2012 at 01:38:10PM -0400, starlight.2012q3 () binnacle cx wrote:
> At 07:13 PM 9/10/2012 -0700, David Fifield wrote:
> > Please try this patch, with both --send-ip and --send-eth.
> > The patch causes route_dst_netlink to add extra specifiers
> > for the source address.
>
> Cool.  It works as desired with --send-eth, but
> not with --send-ip.  The commands used (carefully
> pasted) were
>
>    nmap -e eth4 -S 172.29.86.4 --send-eth -Pn 69.160.42.66
>
> and
>
>    nmap -e eth4 -S 172.29.86.4 --send-ip -Pn 69.160.42.66
>
> (Destination address is spammer IP)
>
> When the above lines have --route_dst and --iflist
> added the results look the same as before.  I see
> in the patch that 'nmap' is making use of a Linux
> kernel routing facility when actually sending
> packets.
>
> With --send-ip traffic is sent out 'eth5' and
> is directed to the MAC of the 172.29.79.2
> router address for that link.

That's good to hear. We are making progress. I've committed this patch
that makes --send-eth work. I will look at why --send-ip does not choose
the same route.

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/