nmap and Linux kernel 2.5.x

[David Ford <david+cert () blue-labs org>]

[ This was sent to nmap-hackers, but I bounced it to nmap-dev instead
  --Fyodor ]

nmap has a very hard time figuring out network gadgets in 2.5.x.  Am I 
missing something or .. ?

When running nmap on 2.5.x, I need to specify both -e and -S.  Nmap 
can't figure out a) what interface to use and b) what route path if it 
isn't localhost or localnet.

# nmap 64.252.54.60

Starting nmap V. 3.15BETA2 ( www.insecure.org/nmap/ )
WARNING:  Could not determine what interface to route packets through to 
64.252.54.60, changing ping scantype to ICMP ping only
pcap_open_live: bind: No such device
There are several possible reasons for this, depending on your operating 
system:
LINUX: If you are getting Socket type not supported, try modprobe 
af_packet or recompile your kernel with SOCK_PACKET enabled.
*BSD:  If you are getting device not configured, you need to recompile 
your kernel with Berkeley Packet Filter support.  If you are getting No 
such file or directory, try creating the device (eg cd /dev; MAKEDEV 
<device>; or use mknod).
SOLARIS:  If you are trying to scan localhost and getting '/dev/lo0: No 
such file or directory', complain to Sun.  I don't think Solaris can 
support advanced localhost scans.  You can probably use "-P0 -sT 
localhost" though.

David

-- 
Stupid disclaimer: I am not responsible for any email that you send me nor 
am I bound to any obligation to deal with any received email in any given 
fashion.  If you send me spam or a virus, I may in whole or part send you 
50,000 return copies of it. I may also publically announce any and all 
emails and post them to message boards, news sites, and even parody sites.  
I may also mark them up, cut and paste, print, and staple them to telephone 
poles for the enjoyment of people without internet access.  This is not a 
confidential medium and your assumption that your email can or will be 
handled confidentially is akin to baring your backside, burying your head in 
the ground, and thinking nobody can see you butt nekkid and in plain view 
for miles away.  Don't be a cluebert, buy one from K-mart today.  Don't 
attach stupid disclaimers to your emails.

When it absolutely, positively, has to be destroyed overnight.
                          AIR FORCE



----- End forwarded message -----

---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).