Re: Bug in OpenBSD nmap still present!

[Ste Jones <root () networkpenetration com>]

just tested nmap 3.20's protocol scan on openbsd 3.2 and it looks like the bug ain;t been squashed


bash-2.05b# nmap -d -v -v -v -sO 192.168.3.1

Starting nmap 3.20 ( www.insecure.org/nmap/ ) at 2003-04-13 04:28 GMT
The first host is 192, and the last one is 192
The first host is 168, and the last one is 168
The first host is 3, and the last one is 3
The first host is 1, and the last one is 1
Packet capture filter (device de0): (icmp and dst host 192.168.3.2) or (tcp and dst host 192.168.3.2 and ( dst port 
53118 or dst port 53119 or dst port 53120 
or dst port 53121 or dst port 53122))
We got a ping packet back from 192.168.3.1: id = 60574 seq = 0 checksum = 4961
Hostupdate called for machine 192.168.3.1 state UNKNOWN/COMBO -> HOST_UP (trynum 0, dotimeadj: yes time: 17094)
Finished block: srtt: 17185 rttvar: 17185 timeout: 300000 block_tries: 1 up_this_block: 1 down_this_block: 0 group_sz: 1
massping done:  num_hosts: 1  num_responses: 1
Host ponygirl (192.168.3.1) appears to be up ... good.
Starting super_scan
Packet capture filter (device de0): (icmp and dst host 192.168.3.2) or (tcp and src host 192.168.3.1 and dst host 
192.168.3.2 and ( dst port 53098 or dst port 
53099))
Initiating IPProto Scan against ponygirl (192.168.3.1) at 4:28
sendto in send_ip_raw: sendto(3, packet, 20, 0, 192.168.3.1, 16) => Invalid argument
Sleeping 15 seconds then retrying



laterz
ste jones
root AT networkpenetration.com



---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).