Nmap Development mailing list archives

nmap 3.93 dumps core when exclude cidr netmask is less than 32


From: nmapuser () globalmegahost com
Date: Thu, 10 Nov 2005 22:41:29 +0000 (GMT)

Hi.

I am using nmap 3.93 on i386 FreeBSD 5.4-RELEASE-p8.  The manpage seems to
indicate that the --exclude option should have host arguments and not
network arguments.  I am probably using nmap incorrectly.  I am
attempting to exclude addresses from nmap scans using cidr notation with
the --exclude option.  It works if the cidr netmask is 32.  I am using
small lists of networks for the purposes of this email.

% nmap -n -sL --exclude 10.1.1.3/32 10.1.1.0/29

Starting nmap 3.93 ( http://www.insecure.org/nmap/ ) at 2005-11-10 15:08 MST
Host 10.1.1.0 not scanned
Host 10.1.1.1 not scanned
Host 10.1.1.2 not scanned
Host 10.1.1.4 not scanned
Host 10.1.1.5 not scanned
Host 10.1.1.6 not scanned
Host 10.1.1.7 not scanned
Nmap finished: 7 IP addresses (0 hosts up) scanned in 0.010 seconds

But if I use a mask less than 32...

% nmap -n -sL --exclude 10.1.1.3/30 10.1.1.0/29

Starting nmap 3.93 ( http://www.insecure.org/nmap/ ) at 2005-11-10 15:10 MST
Assertion failed: (targets_type == IPV6_ADDRESS), function get_next_host, file TargetGroup.cc, line 429.
Abort (core dumped)

A different method works but I don't think '10.1.1.0-3' fits into an
sql variable of type cidr.  In other words, the workaround is not suitable
for my purposes.

% nmap -n -sL --exclude 10.1.1.0-3 10.1.1.0/29

Starting nmap 3.93 ( http://www.insecure.org/nmap/ ) at 2005-11-10 15:12 MST
Host 10.1.1.4 not scanned
Host 10.1.1.5 not scanned
Host 10.1.1.6 not scanned
Host 10.1.1.7 not scanned
Nmap finished: 4 IP addresses (0 hosts up) scanned in 0.010 seconds

It would be nice for the exclude option(s) to parse cidr notation such
that networks could easily be excluded and not just host lists.

Please CC me as I am not on the list.

Thank you,

Adam


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev


Current thread: