Tel 678.697.4783
Fax 678.840.7870
Po Box 4432
Marietta, Ga 30061
info@jamboconsulting.com

 Subscribe in a reader



Lunarpages.com Web Hosting
Web hosting by ICDSoft

Archives

Previous Posts

Powered by Blogger

Friday, June 15, 2007

Tech: Parallels 3.0 causing NMAP errors?

I don't have any definitive proof, but it seems that installing Parallels 3.0 causes certain networking tools to break. I've noticed nmap 2.403 on my machine is broken since I upgraded to Parallels 3.0. I didn't suspect Parallels until I found another user ( dcortesi.com ) complaining about the same issue, as well as similhttp://www.blogger.com/img/gl.link.gifar reports on Parallels' forums regarding Cisco VPN client.

Whenever I run nmap I would get the following error:

Starting Nmap 4.03 ( http://www.insecure.org/nmap/ ) at 2007-06-15 13:36 EDT
getinterfaces: Failed to obtain MAC address for ethernet interface (fw0)
QUITTING!


Following similar resolution procedures for the Cisco VPN client ( uninstall Parallels, Cisco VPN, then reinstalling Parallels before Cisco VPN client ), I decided to reinstall nmap on my system. After downloading, compiling, and installing the latest version of nmap the issue was fixed.


1) Download latest Nmap version
2) Unpack the archive
3)
cd nmap-4.21ALPHA4
./configure --prefix=/opt/local
make
sudo make install

Correction: should configure with the following options:
./configure --prefix=/opt/local --without-nmapfe
nmapfe is the GUI interface that uses GTK+ and X11 which we typically don't use on OS X


Labels: , , ,

Article Link posted by Jambo Consulting at 4:54 PM

4 Comments:

Anonymous Damon said...

Bummer, didn't work for me. :-\ I should note that nmap works fine as a user, but not when running under sudo.

6/15/2007 09:29:00 PM  
Blogger Jambo Consulting said...

Actually, after some more testing I found the same problem. Everything seems to work except in sudo. Odd.

6/19/2007 02:25:00 PM  
Anonymous Anonymous said...

Sadly this doesn't work for everyone.

7/04/2007 07:25:00 AM  
Blogger Jambo Consulting said...

There's a reply from Parallels about the NMAP situation.

http://forum.parallels.com/thread13298-2.html


Re Nmap behaviour:

Nmap 4.20 message about BPF device not available is misleading. Nmap is trying to bind BPF device to fw0 interface upon detecting that fw0 have IPv4 address. What nmap fails to check is whether fw0 is actually UP. If fw0 is down BIOCSETIF ioctl fails with appropriate error (interface is down) but the error code is not checked by nmap and the failure reported as BPF problem. If fw0 is UP nmap will complain that it's unable to obtain fw0 MAC address which is expected since fw0 is not an ethernet device. In both cases nmap ceases to function....

8/07/2007 04:33:00 PM  

Post a Comment

Links to this post:

Create a Link

<< Home