[RndTbl] latest kernel rate limits icmp to different hosts? (** nmap shows bug! **)

[Wyatt Zacharias]

My two F23 boxes are only at 4.4.9 and 4.7.9. No problems with your script
and nmap on them.

I'll see if I have time to do an update tonight and test with the newest
kernel.

--
Wyatt Zacharias


On Thu, Dec 1, 2016 at 2:53 AM, Trevor Cordes <trevor at tecnopolis.ca> wrote:

> No solution yet, but I was able to reproduce the bug with nmap, yay!!!
>
> #nmap -PE 192.168.101.0/24
> Starting Nmap 7.12 ( https://nmap.org ) at 2016-12-01 02:50 CST
> sendto in send_ip_packet_sd: sendto(5, packet, 44, 0, 192.168.101.102,16)
> => Operation not permitted
> Offending packet: TCP 192.168.101.1:57520 > 192.168.101.102:21 S ttl=51
> id=5430 iplen=44 seq=879361804 win=1024 <mss 1460>
>
> Looks like -sP does more than just ping and it's not fast enough to
> trigger the bug.  -PE is what I need to reproduce the conditions of my
> script.
> _______________________________________________
> Roundtable mailing list
> Roundtable at muug.ca
> https://muug.ca/mailman/listinfo/roundtable
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://muug.ca/pipermail/roundtable/attachments/20161201/669ce5be/attachment.html>