Hi All,

I am getting this output each time I run Nmap:
Starting nmap 3.45 ( http://www.insecure.org/nmap/ ) at 2003-05-06 00:20 BST
sendto in send_tcp_raw: sendto(3, packet, 40, 0, ***.***.***.***, 16) => Operation not permitted
sendto in send_tcp_raw: sendto(3, packet, 40, 0, ***.***.***.***, 16) => Operation not permitted
sendto in send_tcp_raw: sendto(3, packet, 40, 0, ***.***.**.*** , 16) => Operation not permitted
sendto in send_tcp_raw: sendto(3, packet, 40, 0, ***.***.***.***, 16) => Operation not permitted
sendto in send_tcp_raw: sendto(3, packet, 40, 0, ***.***.***.***, 16) => Operation not permitted
sendto in send_tcp_raw: sendto(3, packet, 40, 0, ***.***.***.***, 16) => Operation not permitted

Anyone any ideas why this happening. Thanks in advance

(( Seems that its my firewall that causes this problem, flushed rules and tried again. No problem ))

Thanx everyone

lub0

I was about to post the same thing. Yes I am root.

same here

Plenty of information about this on Google.
http://lists.insecure.org/lists/nmap...-Jun/0076.html

I just copied the entire error string:
sendto in send_tcp_raw: sendto(3, packet, 40, 0, ***.***.***.***, 16) => Operation not permitted

And pasted it into a Google search. The above was one of the first links displayed.

Thanks chort, there was also info at insecure.org ( Doh! ) Seems that its my firewall that causes this problem, flushed rules and tried again. No problem

Thanx everyone

Plenty of information about this on Google.
I'd rather you not do this. Either give a specific link, in-depth info or please move on to a question you're willing to answer properly.
Answering properly will benefit current and future thread readers.

TIA

Figured I'd just Ask here, instead of wasting a whole new thread..

Was wondering if anyone knew what outbound and inbound(if any) ports Nmap uses when scanning a remote machine.

I've done some searching of my own, and people who don't know will say, "check out google" or the Nmap homepage, but I've searched well enough before i post here.

Anyways, one opinion I've recieved is that a program like Nmap, simply uses whatever random High numbered port is available, to make sure there are no conflicts with regular services.

If anyone thinks otherwise, please post your comments or the port numbers here.

The idea is to be able to scan remote machines without having to disable my firewall, instead simply open up the ports that need to be open.

Thanks in advance.

You really should open up another thread if the your question doesn't really relate to the thread opener's question. But I'm nice(Only on days that don't end in 'y').

NMAP, unless otherwise instructed, will use the next available high range port number that is available. It's the nature of TCP and UDP. NMAP can if I'm not mistaken be told to use a specific source port. The destination port however is dependent on what you told NMAP to do.

Depending on how you firewall is setup you might have to open it a little to allow all outgoing NEW traffic to go through.


--tarballedtux
(Because I said so)