nmap fails to get mac of one host with 2 NICs, one of them with 2 virtual interfaces in same subnet

["Andrei Jucan" <ajucan () blazent com>]

Hi,

The main test case is as follows:

We want to scan one computer in our network ( unix system ) which has 2
NICs configured as follows:
eth0      HWaddr 00:0C:F1:DB:C3:3D
          inet addr:10.27.0.100  Bcast:10.27.0.255  Mask:255.255.255.0
eth0:1    HWaddr 00:0C:F1:DB:C3:3D
          inet addr:10.27.0.200  Bcast:10.27.0.255  Mask:255.255.255.0
 
eth1      HWaddr 00:0A:CD:0F:DB:F8
          inet addr:10.27.1.100  Bcast:10.27.1.255  Mask:255.255.255.0
 
we have multiple ways for configure a scan on that host, regarding ip
inclusion
and i'll write all of them here:
1. nmap 10.27.0.100 (only that host)
2. nmap 10.27.0.98-110 (included in range, not first/last)
3. nmap 10.27.0.100-110 (included in range,as first ip)
4. nmap 10.27.0.90-100 (included in range, as last ip)
 
Mac-addresses reported by nmap in each case are:
1. 00:0A:CD:0F:DB:F8 WRONG
2. 00:0C:F1:DB:C3:3D CORRECT
3. 00:0A:CD:0F:DB:F8 WRONG
4. 00:0C:F1:DB:C3:3D CORRECT

 

Please help me in finding a solution to that, any kind of solution (
bugfix - code, workaround...)

 

Thank you in advance,

Andrei Jucan

andreijucan () yahoo com


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org