Re: 'nmap -S <src_addr>' does not use 'iproute2' alternate routing table

[David Fifield <david () bamsoftware com>]

On Mon, Sep 10, 2012 at 04:47:43PM -0400, starlight.2012q3 () binnacle cx wrote:
> ALSO:
>
> # nmap -e eth4 -S 172.29.86.4 --route-dst 69.160.42.66
> 69.160.42.66
> eth4 eth4 srcaddr 172.29.79.1 nexthop 172.29.79.2
> WARNING: If -S is being used to fake your source address, you may also have to use -e <interface> and -Pn .  If you 
> are using it to specify your real source address, you can ignore this warning.
>
> Starting Nmap 6.02 ( http://nmap.org ) at 2012-09-10 16:44 EDT
> WARNING: No targets were specified, so 0 hosts scanned.
> Nmap done: 0 IP addresses (0 hosts up) scanned in 0.05 seconds
>
>
> AND
>
> # nmap -e eth4 -S 172.29.86.4 -Pn 69.160.42.66
>
> ***DEFINATELY*** is sending traffic via 'eth5'
> to the MAC of 172.29.79.2.

I'm not sure what to do here, because in --send-ip mode (the default on
Linux), Nmap just builds the packets and lets the kernel send them. Does
        ncat -s 172.29.86.4 69.160.42.66 80
also route over the wrong interface?

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/