Re: BUG: Not showing MAC address of last device in ping scan

[Daniel Miller <bonsaiviking () gmail com>]

Jaime,

Thank you for reporting this. Most likely, the last IP is the source IP of
the scan. In this case, the traffic goes over the loopback adapter which is
a software abstraction and does not have a MAC address. The reason the
address is the last one in the list has to do with this performance
enhancement from the 6.40 release:

o Nmap may now partially rearrange its target list for more efficient
>   host groups. Previously, a single target with a different interface,
>   or with an IP address the same as a that of a target already in the
>   group, would cause the group to be broken off at whatever size it
>   was. Now, we buffer a small number of such targets, and keep looking
>   through the input for more targets to fill out the current group.
>   [David Fifield]

Previously, Nmap would scan a LAN in 3 groups: the first group up to the
scanner's address, then the scanner itself, then the third group from the
scanner's address to the end of the range. Now, when it encounters the
scanner's address and sees that it uses a different interface than the
other addresses, it defers scanning it until the rest of the LAN has been
scanned. That's why that address appears "out of order" relative to all the
other targets.

Dan

On Fri, Nov 27, 2015 at 2:07 AM, Jaime Idolpx <jaime () idolpx com> wrote:

> I was doing some testing and noticed that the MAC address of the last
> device doesn’t get displayed.
> I’m using Nmap 7.00 on both Windows and Mac and getting the same results.
> Here is my scan from each.
> It also doesn’t show the latency for the last device either.
>
> I’m not complaining, just trying to help by reporting this inconsistency.
>  :)
> Thanks for an awesome program.
>
>
> Windows
>
> ————————————————————————————
>
> Starting Nmap 7.00 ( https://nmap.org ) at 2015-11-27 02:38 Eastern Standard Time
> Nmap scan report for chAdmin.wp.comcast.net (192.168.1.1)
> Host is up (0.00s latency).
> MAC Address: C4:04:15:31:6A:03 (Unknown)
> Nmap scan report for 192.168.1.2
> Host is up (0.00s latency).
> MAC Address: E8:DE:27:B3:68:1A (Unknown)
> Nmap scan report for 192.168.1.3
> Host is up (0.00s latency).
> MAC Address: E8:DE:27:35:88:C1 (Unknown)
> Nmap scan report for 192.168.1.20
> Host is up (0.00s latency).
> MAC Address: C4:2C:03:12:D7:3E (Unknown)
> Nmap scan report for 192.168.1.53
> Host is up (0.00s latency).
> MAC Address: 00:BB:3A:CE:E1:E6 (Unknown)
> Nmap scan report for 192.168.1.90
> Host is up (0.00s latency).
> MAC Address: 00:1C:42:8B:61:26 (Unknown)
> Nmap scan report for Chromecast.wp.comcast.net (192.168.1.101)
> Host is up (0.078s latency).
> MAC Address: 40:0E:85:47:C2:14 (Unknown)
> Nmap scan report for 192.168.1.104
> Host is up (0.094s latency).
> MAC Address: E8:92:A4:FF:AC:31 (Unknown)
> Nmap scan report for android-2ba4b837df7134df.wp.comcast.net (192.168.1.106)
> Host is up (0.11s latency).
> MAC Address: 10:A5:D0:DD:6B:A9 (Unknown)
> Nmap scan report for 192.168.1.113
> Host is up (0.00s latency).
> MAC Address: 00:17:F2:FB:C3:4E (Unknown)
> Nmap scan report for 192.168.1.115
> Host is up (0.00s latency).
> MAC Address: 10:00:00:21:A9:19 (Unknown)
> Nmap scan report for 192.168.1.118
> Host is up (0.094s latency).
> MAC Address: A0:02:DC:D1:CB:76 (Unknown)
> Nmap scan report for 192.168.1.119
> Host is up (0.11s latency).
> MAC Address: D0:25:98:C9:66:47 (Unknown)
> Nmap scan report for 192.168.1.202
> Host is up (0.14s latency).
> MAC Address: E8:AB:FA:01:69:CE (Unknown)
> Nmap scan report for 192.168.1.203
> Host is up (0.13s latency).
> MAC Address: E8:AB:FA:02:98:71 (Unknown)
> Nmap scan report for 192.168.1.204
> Host is up (0.032s latency).
> MAC Address: 20:F4:1B:EB:09:31 (Unknown)
> Nmap scan report for 192.168.1.250
> Host is up (0.00s latency).
> MAC Address: 08:00:37:2A:01:FA (Unknown)
> Nmap scan report for 192.168.1.240
> Host is up.
> Nmap done: 256 IP addresses (18 hosts up) scanned in 3.39 seconds
>
> ————————————————————————————
>
>
> OSX
>
> ————————————————————————————
>
> Starting Nmap 7.00 ( https://nmap.org ) at 2015-11-27 02:46 EST
> Nmap scan report for chAdmin.wp.comcast.net (192.168.1.1)
> Host is up (0.0034s latency).
> MAC Address: C4:04:15:31:6A:03 (Netgear)
> Nmap scan report for 192.168.1.2
> Host is up (0.0010s latency).
> MAC Address: E8:DE:27:B3:68:1A (Tp-link Technologies)
> Nmap scan report for 192.168.1.3
> Host is up (0.00047s latency).
> MAC Address: E8:DE:27:35:88:C1 (Tp-link Technologies)
> Nmap scan report for 192.168.1.53
> Host is up (0.00041s latency).
> MAC Address: 00:BB:3A:CE:E1:E6 (Private)
> Nmap scan report for Chromecast.wp.comcast.net (192.168.1.101)
> Host is up (0.24s latency).
> MAC Address: 40:0E:85:47:C2:14 (Samsung Electro Mechanics)
> Nmap scan report for 192.168.1.104
> Host is up (0.10s latency).
> MAC Address: E8:92:A4:FF:AC:31 (LG Electronics)
> Nmap scan report for android-2ba4b837df7134df.wp.comcast.net (192.168.1.106)
> Host is up (0.11s latency).
> MAC Address: 10:A5:D0:DD:6B:A9 (Murata Manufacturing)
> Nmap scan report for SonosZB.wp.comcast.net (192.168.1.107)
> Host is up (0.099s latency).
> MAC Address: F0:D1:A9:1E:8B:77 (Apple)
> Nmap scan report for 192.168.1.113
> Host is up (0.0020s latency).
> MAC Address: 00:17:F2:FB:C3:4E (Apple)
> Nmap scan report for 192.168.1.115
> Host is up (0.0017s latency).
> MAC Address: 10:00:00:21:A9:19 (Private)
> Nmap scan report for 192.168.1.118
> Host is up (0.081s latency).
> MAC Address: A0:02:DC:D1:CB:76 (Amazon Technologies)
> Nmap scan report for 192.168.1.119
> Host is up (0.084s latency).
> MAC Address: D0:25:98:C9:66:47 (Apple)
> Nmap scan report for 192.168.1.202
> Host is up (0.11s latency).
> MAC Address: E8:AB:FA:01:69:CE (Shenzhen Reecam Tech.Ltd.)
> Nmap scan report for 192.168.1.203
> Host is up (0.081s latency).
> MAC Address: E8:AB:FA:02:98:71 (Shenzhen Reecam Tech.Ltd.)
> Nmap scan report for 192.168.1.204
> Host is up (0.084s latency).
> MAC Address: 20:F4:1B:EB:09:31 (Shenzhen Bilian electronic)
> Nmap scan report for 192.168.1.240
> Host is up (0.00035s latency).
> MAC Address: 00:0C:F1:A3:B0:2D (Intel)
> Nmap scan report for 192.168.1.250
> Host is up (0.0073s latency).
> MAC Address: 08:00:37:2A:01:FA (Fuji-xerox)
> Nmap scan report for 192.168.1.20
> Host is up.
> Nmap done: 256 IP addresses (18 hosts up) scanned in 2.94 seconds
>
> ————————————————————————————
>
>
>
>
> _______________________________________________
> Sent through the dev mailing list
> https://nmap.org/mailman/listinfo/dev
> Archived at http://seclists.org/nmap-dev/
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/