Nmap Development mailing list archives
[NSE] Changes to dhcp-discover and dhcp.lua
From: Patrik Karlsson <patrik () cqure net>
Date: Tue, 27 Dec 2011 19:51:40 +0100
Hi list, I noticed some problems with the dhcp-discover script while working on some other stuff. I tested the script against a bunch of different DHCP servers and noticed that I wasn't getting any results. The problem was most likely introduced when we re-wrote a bunch of scripts to use the unconnected socket code. What happens is that the script first sends a unicast DHCPDISCOVER request to the server, the server then allocates an IP and sends the response back to that new IP. The script previously used pcap to pick up that response, as it was not addressed to the host running the script. When we incorrectly replaced that pcap-code with a listening socket the script no longer sees the response. A while back I implemented a similar script that gets the same information by using a broadcast request (broadcast-dhcp-discover) instead of unicast. So, instead of putting the old pcap code back in I changed the code to send a DHCPINFORM request instead. The upside of this change is: * it doesn't suffer from the problem that it doesn't see the response * it doesn't allocate a new IP for the client * it gets the same information as the DHCPDISCOVER request does The downside is that it doesn't work against all DHCP server implementation, according to the old script documentation. I've committed this change and some bug fixes and code cleanup in the DHCP library as r27661. What I would also like to suggest is that we break out the DoS functionality in the script to a separate script, maybe dhcp-dos? This way we could remove the script from the intrusive category, which would be a good thing in my opinion. Cheers, Patrik -- Patrik Karlsson http://www.cqure.net http://twitter.com/nevdull77 _______________________________________________ Sent through the nmap-dev mailing list http://cgi.insecure.org/mailman/listinfo/nmap-dev Archived at http://seclists.org/nmap-dev/
Current thread:
- [NSE] Changes to dhcp-discover and dhcp.lua Patrik Karlsson (Dec 27)
- Re: [NSE] Changes to dhcp-discover and dhcp.lua Daniel Miller (Dec 27)
- Re: [NSE] Changes to dhcp-discover and dhcp.lua Duarte Silva (Dec 27)
- Re: [NSE] Changes to dhcp-discover and dhcp.lua Patrik Karlsson (Dec 29)
- Re: [NSE] Changes to dhcp-discover and dhcp.lua Duarte Silva (Dec 27)
- Re: [NSE] Changes to dhcp-discover and dhcp.lua Daniel Miller (Dec 27)