Nmap 6.25 (possible) bug report

[Beppe Baschieri <baschieri () intercom it>]

Nmap 6.25
Gentoo 3.8.13-gentoo

sending the following command (to test a firewall rules matching with 
<syn> session init)
# nmap -e eth0 -Pn -S 10.209.12.24 10.209.17.239 -p 80
I can't see the <syn> packet arriving on fw node

analyzing with tcpdump I find out this ARP request, related to the 
execution of the below command, as it is trying to send the packet to 
the local vlan instead to sent it to the gw

15:35:26.498921 ARP, Request who-has 10.209.17.239 (ff:ff:ff:ff:ff:ff) 
tell 10.209.12.24, length 28
15:35:26.699203 ARP, Request who-has 10.209.17.239 (ff:ff:ff:ff:ff:ff) 
tell 10.209.12.24, length 28

The same command
# nmap -e eth0 -Pn -S 10.209.12.24 10.209.17.239 -p 80
works perfectly on another machine, a Debian 3.2 system with Nmap 6.00

Best regards.

Beppe Baschieri
-
_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/