Hi there, afaig (as far as i googled ;) others had reported the problem with 9.0 and nmap already, but noone has a solution right now. On 9.0 no nmap i know does work. I tried multiple boxes with 9.0 with no success. A fresh builded nmap doesn't work, too. The same nmap sourcecode on other distro's and SuSE's works. Ok, nmap doesn't work isn't correctly, it 'works': Doing a nmap localhost as $user isn't a problem, scan completed in < 1 sec. su - and nmap again -> fails: Note: Host seems down. If it is really up, but blocking our ping probes, try -P0 Nmap run completed -- 1 IP address (0 hosts up) scanned in 36.408 seconds ok, all will now say: 'do what nmap said..' but that isn't a solution. nmap will run then, but doesn't give any output (it's running a few minutes now). A firewall isn't installed and manual ping localhost as root works. So anyone can say something about it? A solution would be nice cause many ppl on this list may use nmap ;) Regards, Sven
On Nov 10, Sven 'Darkman' Michels <sven@darkman.de> wrote:
Doing a nmap localhost as $user isn't a problem, scan completed in < 1 sec. su - and nmap again -> fails: Note: Host seems down. If it is really up, but blocking our ping probes, try -P0 Nmap run completed -- 1 IP address (0 hosts up) scanned in 36.408 seconds
I can confirm that, my SuSE 9.0 shows the same symptoms (scanning localhost or another host in the LAN). Probably something within the kernel is broken :-( Markus -- __________________ /"\ Markus Gaugusch \ / ASCII Ribbon Campaign markus@gaugusch.at X Against HTML Mail / \
Markus Gaugusch wrote:
I can confirm that, my SuSE 9.0 shows the same symptoms (scanning localhost or another host in the LAN). Probably something within the kernel is broken :-(
Looks like, i heard something about that newer kernels (2.6.x, maybe 2.5) had a bug which stops nmap from working, maybe its in some of the backports used in suse's kernel? anyone running it's own (vanilla-)kernel and can confirm that nmap is still working on 9.0 with a recent kernel? would be easier for tracking ;) Regards, Sven
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Markus Gaugusch wrote: | I can confirm that, my SuSE 9.0 shows the same symptoms (scanning | localhost or another host in the LAN). | Probably something within the kernel is broken :-( Hmm... I've noticed, that on SuSE 9.0, nmap with command line "-sP 192.168.2.0/24 |grep up" don't really work, if you are root. By under non privileged user it work's fine. But on SuSE 8.2, user root was not a problem :) | Markus - -- Boris B. Zhmurov Vihino.net LAN admin -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) Comment: Using GnuPG with Netscape - http://enigmail.mozdev.org iD8DBQE/r/0SmEQixi5w37YRAq6fAJ9bg7RJWmfhbz1g8WgKFIuqdocJnQCcC20W LYRVrxc/OvRc91FfZ20nW1I= =IATV -----END PGP SIGNATURE-----
Markus Gaugusch wrote: | I can confirm that, my SuSE 9.0 shows the same symptoms (scanning | localhost or another host in the LAN). | Probably something within the kernel is broken :-(
Hmm... I've noticed, that on SuSE 9.0, nmap with command line "-sP 192.168.2.0/24 |grep up" don't really work, if you are root. By under non privileged user it work's fine. But on SuSE 8.2, user root was not a problem :) | Markus Boris B. Zhmurov
We'll be digging into this as soon as I find some time. Roman.
Hi out there, first sorry for rewarming this old thread! :-) But I found something usefull that makes nmap work with root-rights on SuSE 9.0: http://seclists.org/lists/nmap-dev/2003/Oct-Dec/0086.html Here is an interesting update from Richard Moore on the problems with Nmap on Suse 9.0. Apparently a workaround is to set HAVE_IP_IP_SUM in nbase/nbase_config.h in the source tree to zero after you run ./configure but before "make". Hopefully a better solution allowing Nmap to automatically detect and work around the issue will become available. I did modify the config.h in the main build directory instead of the nbase/ nbase_config.h with nmap 3.48 because there seems to be the primary definition of HAVE_IP_IP_SUM. I haven't diged what this does or what it breaks, but nmap does run with root-rights. On Montag, 10. November 2003 20:01, Sven 'Darkman' Michels wrote:
Hi there,
afaig (as far as i googled ;) others had reported the problem with 9.0 and nmap already, but noone has a solution right now. On 9.0 no nmap i know does work. I tried multiple boxes with 9.0 with no success. A fresh builded nmap doesn't work, too. The same nmap sourcecode on other distro's and SuSE's works. Ok, nmap doesn't work isn't correctly, it 'works': Doing a nmap localhost as $user isn't a problem, scan completed in < 1 sec. su - and nmap again -> fails: Note: Host seems down. If it is really up, but blocking our ping probes, try -P0 Nmap run completed -- 1 IP address (0 hosts up) scanned in 36.408 seconds
ok, all will now say: 'do what nmap said..' but that isn't a solution. nmap will run then, but doesn't give any output (it's running a few minutes now). A firewall isn't installed and manual ping localhost as root works.
So anyone can say something about it? A solution would be nice cause many ppl on this list may use nmap ;)
Regards, Sven
-- Eat, sleep and go running, David Huecking. Encrypted eMail welcome! GnuPG/ PGP-Key: 0x57809216. Fingerprint: 3DF2 CBE0 DFAA 4164 02C2 4E2A E005 8DF7 5780 9216
participants (5)
-
Boris B. Zhmurov
-
David Huecking
-
Markus Gaugusch
-
Roman Drahtmueller
-
Sven 'Darkman' Michels