Re: 'nmap -S <src_addr>' does not use 'iproute2' alternate routing table

[David Fifield <david () bamsoftware com>]

On Mon, Sep 10, 2012 at 05:05:39PM -0400, starlight.2012q3 () binnacle cx wrote:
> At 01:55 PM 9/10/2012 -0700, David Fifield wrote:
> > On Mon, Sep 10, 2012 at 04:47:43PM -0400, 
> >
> > I'm not sure what to do here, because in --send-ip
> > mode (the default on Linux), Nmap just builds the
> > packets and lets the kernel send them. Does
> >     ncat -s 172.29.86.4 69.160.42.66 80
> > also route over the wrong interface?
>
> Curious.  I thought --send-eth was the default
> when running as 'root'.
>
> Anyway 
>
> # nmap -e eth4 -S 172.29.86.4 --send-eth -Pn 69.160.42.66
>
> Does send the packets out 'eth4', but it
> sends the to the MAC address of 172.29.87.2
> which is not present on the 'eth4' network
> and is only present on the 'eth5' network'.
> Therefore the packets go nowhere.

Please try this patch, with both --send-ip and --send-eth. The patch
causes route_dst_netlink to add extra specifiers for the source address.

David Fifield

Attachment: route_dst_netlink-src.patch
Description:

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/