nnamp question

[Andrew Gilligan]

On 8 Feb 2006, at 18:05, gahn wrote:

> Thanks Tim:
>
> well, the real interface is rl0...:) sorry for the
> confusion.
>
> the problem is that the nmap seems to have mind of its
> own and stick with em0:
>
> sis# nmap -e rl0 -v -sP 192.168.126.0/23
>
> Starting Nmap 3.95 ( http://www.insecure.org/nmap/ )
> at 2006-02-08 12:01 CST
> getinterfaces: Failed to open ethernet interface (em0)
> QUITTING!
>
> It has 4 interfacres but nmap just sticks with em0. i
> am lost ...

It could be that you're running out of BPF devices.

With recent versions of nmap, I needed to create 11
entries in /dev before I could get it to work.

The machine in question was FreeBSD 4.11 with 4
physical interfaces.

To check, run nmap through truss:

  truss nmap -e rl0 -sP 192.168.126.0/23

And look for something like:

  open("/dev/bpf4",0x1,027757740460)     ERR#16 'Device busy'
  open("/dev/bpf5",0x1,027757740460)     ERR#16 'Device busy'
  open("/dev/bpf6",0x1,027757740460)     ERR#2 'No such file or  
directory'

If you see that, then just add any BPF devices you
need:

  cd /dev && sh ./MAKEDEV bpf6

Regards,
-Andy