Re: Nmap 6.25 (possible) bug report

[John Bond <mail () johnbond org>]

What are the results with the  current release 6.40?

-----Original Message-----
From: Beppe Baschieri <baschieri () intercom it>
Reply-To: <baschieri () intercom it>
Date: Thursday 13 February 2014 15:47
To: <dev () nmap org>
Subject: Nmap 6.25 (possible) bug report

> Nmap 6.25
> Gentoo 3.8.13-gentoo
>
> sending the following command (to test a firewall rules matching with
> <syn> session init)
> # nmap -e eth0 -Pn -S 10.209.12.24 10.209.17.239 -p 80
> I can't see the <syn> packet arriving on fw node
>
> analyzing with tcpdump I find out this ARP request, related to the
> execution of the below command, as it is trying to send the packet to
> the local vlan instead to sent it to the gw
>
> 15:35:26.498921 ARP, Request who-has 10.209.17.239 (ff:ff:ff:ff:ff:ff)
> tell 10.209.12.24, length 28
> 15:35:26.699203 ARP, Request who-has 10.209.17.239 (ff:ff:ff:ff:ff:ff)
> tell 10.209.12.24, length 28
>
> The same command
> # nmap -e eth0 -Pn -S 10.209.12.24 10.209.17.239 -p 80
> works perfectly on another machine, a Debian 3.2 system with Nmap 6.00
>
> Best regards.
>
> Beppe Baschieri
> -
> _______________________________________________
> Sent through the dev mailing list
> http://nmap.org/mailman/listinfo/dev
> Archived at http://seclists.org/nmap-dev/


_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/