Re: nmap/vmware osx bug

["Kurt Grutzmacher" <grutz () jingojango net>]

I don't have VMWare for OSX installed but it looks like BPF/libpcap doesn't
like the vmnet8 interface. Probably not 'root' related. Try doing this:

$ sudo nmap -sS -p 22,80 --packet-trace scanme.insecure.org

If that works then we need to figure out why nmap is going out vmnet8 for
localhost. Send the output of your --iflist:

$ nmap --iflist


On 4/29/07, Garrett Reid <garrett.reid () gmail com> wrote:
> I'm running nmap under OSX (the system that just had VMWare installed
> on it).
>
> On Apr 29, 2007, at 7:21 PM, Sina Bahram wrote:
>
> > Are you running nmap under vmware?
> >
> > Or are you speaking of running it on the system that has vmware
> > installed on
> > it?
> >
> > Take care,
> > Sina
> >
> > -----Original Message-----
> > From: nmap-dev-bounces () insecure org [mailto:nmap-dev-
> > bounces () insecure org]
> > On Behalf Of Garrett Reid
> > Sent: Sunday, April 29, 2007 9:19 PM
> > To: nmap-dev () insecure org
> > Cc: Garrett Reid
> > Subject: nmap/vmware osx bug
> >
> > I'm not sure if this is the right place to report this, so
> > apologies in
> > advance if it isn't.
> >
> > For some reason, after installing VMWare Fusion Beta3 (the current
> > beta for
> > mac users), nmap will not run as root:
> > >  garrett$ sudo nmap localhost
> > > Starting Nmap 4.20 ( http://insecure.org ) at 2007-04-29 19:06 MDT
> > > getinterfaces: Failed to open ethernet interface (vmnet8). A possible
> > > cause on BSD operating systems is running out of BPF devices (see
> > > http://seclists.org/lists/nmap-dev/2006/Jan-Mar/
> > > 0014.html).
> > > QUITTING!
> >
> > However, if run as a non-root user, it works fine:
> > > garrett$ nmap localhost
> > > Starting Nmap 4.20 ( http://insecure.org ) at 2007-04-29 19:16 MDT
> > > Interesting ports on localhost (127.0.0.1)
> >
> > I'm not sure if this is nmap using the wrong interface, or vmware
> > breaking
> > raw sockets or just what is going on, so I've posted this bug to both
> > parties. However, since this is a mailing-list, I'll hopefully be
> > getting
> > some feedback from here =)
> >
> > -Garrett
> >
> > _______________________________________________
> > Sent through the nmap-dev mailing list
> > http://cgi.insecure.org/mailman/listinfo/nmap-dev
> > Archived at http://SecLists.Org
> >
> >
> > _______________________________________________
> > Sent through the nmap-dev mailing list
> > http://cgi.insecure.org/mailman/listinfo/nmap-dev
> > Archived at http://SecLists.Org
>
>
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://SecLists.Org

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org