Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 9 Feb 2006 12:08:34 +0000
From:      Andrew Gilligan <andy@tcpd.net>
To:        freebsd-security@freebsd.org
Cc:        gahn <ipfreak@yahoo.com>
Subject:   Re: nnamp question
Message-ID:  <35556F4C-AEBF-446B-8F79-0DC533465751@tcpd.net>
In-Reply-To: <20060208180524.57968.qmail@web52110.mail.yahoo.com>
References:  <20060208180524.57968.qmail@web52110.mail.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 8 Feb 2006, at 18:05, gahn wrote:

> Thanks Tim:
>
> well, the real interface is rl0...:) sorry for the
> confusion.
>
> the problem is that the nmap seems to have mind of its
> own and stick with em0:
>
> sis# nmap -e rl0 -v -sP 192.168.126.0/23
>
> Starting Nmap 3.95 ( http://www.insecure.org/nmap/ )
> at 2006-02-08 12:01 CST
> getinterfaces: Failed to open ethernet interface (em0)
> QUITTING!
>
> It has 4 interfacres but nmap just sticks with em0. i
> am lost ...

It could be that you're running out of BPF devices.

With recent versions of nmap, I needed to create 11
entries in /dev before I could get it to work.

The machine in question was FreeBSD 4.11 with 4
physical interfaces.

To check, run nmap through truss:

  truss nmap -e rl0 -sP 192.168.126.0/23

And look for something like:

  open("/dev/bpf4",0x1,027757740460)     ERR#16 'Device busy'
  open("/dev/bpf5",0x1,027757740460)     ERR#16 'Device busy'
  open("/dev/bpf6",0x1,027757740460)     ERR#2 'No such file or  
directory'

If you see that, then just add any BPF devices you
need:

  cd /dev && sh ./MAKEDEV bpf6

Regards,
-Andy



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?35556F4C-AEBF-446B-8F79-0DC533465751>