Re: nmap 3.50 Oddity on FreeBSD 4.9-RELEASE

[MadHat <madhat () unspecific com>]

On Mar 23, 2004, at 3:06 AM, Weiersmüller Mathias (KPFN 1) wrote:
> Is the network 10.51.55.0/25 directly connected, or is a entry in the 
> routing table which has the address 10.51.55.0 as "first address" 
> within the network? So this address is a "network number", and I 
> suppose that FreeBSD 4.9 does not want to send packets towards the 
> network number.
>
> What happens when trying to ping or open a telnet towards 10.51.55.0?

This is what I  have been trying to test, on my local networks.  Trying 
to see if I can get it to generate those errors when there is no route 
to host, but have not been successful in reproducing the issue when 
testing on Linux, OSX or BSD as of yet.


> Just my 5 cents...
>
> Mathias Weiersmueller
>
>
> > On Mar 20, 2004, at 12:24 AM, eric wrote:
> > > Thinking that I'd get around the following problem, I switched my
> > > attack host from OpenBSD to FreeBSD. However, when using the
> > > following attack method...
> > >
> > > sudo nmap -sS -p '1-65535' -g 53 -oG foo.gnmap  -T 4 -iL foo.list
> > >
> > > I get the following..
> > >
> > > sendto in send_ip_raw: sendto(6, packet, 28, 0, 10.51.55.0, 16) =>
> > > Can't assign requested address
> > > Sleeping 15 seconds then retrying
> > >
> > > foo.list contains the following
> > >
> > > $ cat foo.list
> > > 10.51.55.0/25
> > > 172.16.0.0/18
> > >
> > > etc..
> > >
> > > This is on FreeBSD 4.9-RELEASE with all current patches and a
> > > GENERIC kernel. If there's any more information you need, please let
> > > me know. Note: doing a SYN scan against hosts doesn't cause this
> > > problem, only using an input list.
> >
> > I am using a freebsd box to do a lot of scanning.  I seem to
> > remember a
> > problem depending on the security, where it would start blocking
> > packets after a certain threshold and I had to make some
> > changes to get
> > it to work.  I am not a bsd expert, and have not looked at in
> > a while,
> > so I can't remember what it was but I will see if I can find it.
> >
> >
> > ---------------------------------------------------------------------
> > For help using this (nmap-dev) mailing list, send a blank email to
> > nmap-dev-help () insecure org . List archive: http://seclists.org
>
> ---------------------------------------------------------------------
> For help using this (nmap-dev) mailing list, send a blank email to
> nmap-dev-help () insecure org . List archive: http://seclists.org


---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to
nmap-dev-help () insecure org . List archive: http://seclists.org