From: Andrew Gilligan (andytcpd.net)
Date: Thu Feb 09 2006 - 06:08:34 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On 8 Feb 2006, at 18:05, gahn wrote:

> Thanks Tim:
>
> well, the real interface is rl0...:) sorry for the
> confusion.
>
> the problem is that the nmap seems to have mind of its
> own and stick with em0:
>
> sis# nmap -e rl0 -v -sP 192.168.126.0/23
>
> Starting Nmap 3.95 ( http://www.insecure.org/nmap/ )
> at 2006-02-08 12:01 CST
> getinterfaces: Failed to open ethernet interface (em0)
> QUITTING!
>
> It has 4 interfacres but nmap just sticks with em0. i
> am lost ...

It could be that you're running out of BPF devices.

With recent versions of nmap, I needed to create 11
entries in /dev before I could get it to work.

The machine in question was FreeBSD 4.11 with 4
physical interfaces.

To check, run nmap through truss:

  truss nmap -e rl0 -sP 192.168.126.0/23

And look for something like:

  open("/dev/bpf4",0x1,027757740460) ERR#16 'Device busy'
  open("/dev/bpf5",0x1,027757740460) ERR#16 'Device busy'
  open("/dev/bpf6",0x1,027757740460) ERR#2 'No such file or
directory'

If you see that, then just add any BPF devices you
need:

  cd /dev && sh ./MAKEDEV bpf6

Regards,
-Andy
_______________________________________________
freebsd-securityfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribefreebsd.org"

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]