Fwd: scanning through linux virtual interface

[Daniel Miller <bonsaiviking () gmail com>]

Neglected to CC the list, sorry.

---------- Forwarded message ----------
From: Daniel Miller <bonsaiviking () gmail com>
Date: Thu, Nov 12, 2015 at 6:36 AM
Subject: Re: scanning through linux virtual interface
To: Robin Wood <robin@digi.ninja>


Robin,

Please try a newer version of Nmap. We added support for venet interfaces
in 6.20BETA1 back in November 2012. If 6.49BETA6 (or even 6.47) still
doesn't work, we'll do our best to fix it.

Dan

On Thu, Nov 12, 2015 at 6:15 AM, Robin Wood <robin@digi.ninja> wrote:

> This just got a little odder, initially I was running the commands as
> root and they all failed, I've just tried as a normal user and not
> only did they work, I didn't need any extra parameters:
>
> $ nmap  digi.ninja
>
> Starting Nmap 6.00 ( http://nmap.org ) at 2015-11-12 07:14 EST
> Nmap scan report for digi.ninja (217.147.177.157)
> Host is up (0.014s latency).
> Not shown: 996 closed ports
> PORT    STATE SERVICE
> 22/tcp  open  ssh
> 25/tcp  open  smtp
> 80/tcp  open  http
> 443/tcp open  https
>
> Nmap done: 1 IP address (1 host up) scanned in 1.32 seconds
>
> $ sudo su -
> [sudo] password for robin:
> #  nmap  digi.ninja
>
> Starting Nmap 6.00 ( http://nmap.org ) at 2015-11-12 07:14 EST
> route_dst_netlink: can't find interface "venet0"
>
> Think I've found a bug here!
>
> Robin
>
>
>
> On 12 November 2015 at 11:12, Robin Wood <robin@digi.ninja> wrote:
> > I'm on a box with two interfaces, venet0 and venet0:0, the first has a
> > localhost address, the second the external address of the server.
> >
> > If I try a a basic scan I get this:
> >
> > # nmap 1.2.3.4
> >
> > Starting Nmap 6.00 ( http://nmap.org ) at 2015-11-12 06:06 EST
> > route_dst_netlink: can't find interface "venet0"
> >
> > so I specify the virtual interface:
> >
> > # nmap 1.2.3.4 -e venet0:0
> >
> > Starting Nmap 6.00 ( http://nmap.org ) at 2015-11-12 06:07 EST
> > I cannot figure out what source address to use for device venet0:0,
> > does it even exist?
> > QUITTING!
> >
> > trying to tell it what the source IP is:
> >
> > # nmap 1.2.3.4 -e venet0:0 -S 2.3.4.5
> > WARNING:  If -S is being used to fake your source address, you may
> > also have to use -e <interface> and -Pn .  If you are using it to
> > specify your real source address, you can ignore this warning.
> >
> > Starting Nmap 6.00 ( http://nmap.org ) at 2015-11-12 06:08 EST
> > Could not find interface venet0:0 which was specified by -e
> >
> > Don't know if this matters, there is no default route which I'd expect
> > to break networking but the machine is working fine, I can ssh to it
> > and it has full internet access:
> >
> > # route -n
> > Kernel IP routing table
> > Destination     Gateway         Genmask         Flags Metric Ref    Use
> Iface
> > 0.0.0.0         0.0.0.0         0.0.0.0         U     0      0        0
> venet0
> > How can I get it to scan from this machine?
> >
> > Robin
> _______________________________________________
> Sent through the dev mailing list
> https://nmap.org/mailman/listinfo/dev
> Archived at http://seclists.org/nmap-dev/
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/