eth0:1 and nmap?

This is a discussion on eth0:1 and nmap? within the Linux Security forums, part of the System Security and Security Related category; I'm trying to troubleshoot a network, and ifconfig gave me a response I've never seen: eth0 Link encap:...


Go Back   Usenet Forums > System Security and Security Related > Linux Security

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 05-19-2004
iksrazal
 
Posts: n/a
Default eth0:1 and nmap?

I'm trying to troubleshoot a network, and ifconfig gave me a response
I've never seen:


eth0 Link encap:Ethernet HWaddr 00:01:03:34:6C:B4
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:34648 errors:0 dropped:0 overruns:1 frame:0
TX packets:21424 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:3085669 (2.9 Mb) TX bytes:3113240 (2.9 Mb)
Interrupt:10 Base address:0xec00

eth0:1 Link encap:Ethernet HWaddr 00:01:03:34:6C:B4
inet addr:192.168.238.60 Bcast:192.168.238.255
Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:34648 errors:0 dropped:0 overruns:1 frame:0
TX packets:21426 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:3085669 (2.9 Mb) TX bytes:3113572 (2.9 Mb)
Interrupt:10 Base address:0xec00


1) What does eth0:1 mean? Could it be ip aliasing? I'm running RH9 - a
stock kernel I believe, which I don't think has ip aliasing support
because its deprecated, but I'm not sure.

2) How can I fix nmap in this case:
/usr/local> nmap -p 389 192.168.238.61

Starting nmap V. 3.00 ( www.insecure.org/nmap/ )
Failed to lookup device subnet/netmask: eth0: no IPv4 address assigned
QUITTING!

/usr/local> nmap -e eth0:1 -p 389 192.168.238.61

Starting nmap V. 3.00 ( www.insecure.org/nmap/ )
I cannot figure out what source address to use for device eth0:1, does
it even exist?
QUITTING!

Any ideas?
iksrazal
Reply With Quote
  #2 (permalink)  
Old 05-24-2004
Andreas Wilm
 
Posts: n/a
Default Re: eth0:1 and nmap?

Hi,

> I'm trying to troubleshoot a network, and ifconfig gave me a response
> I've never seen:
>
> eth0 Link encap:Ethernet HWaddr 00:01:03:34:6C:B4
> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
> RX packets:34648 errors:0 dropped:0 overruns:1 frame:0
> TX packets:21424 errors:0 dropped:0 overruns:0 carrier:0
> collisions:0 txqueuelen:100
> RX bytes:3085669 (2.9 Mb) TX bytes:3113240 (2.9 Mb)
> Interrupt:10 Base address:0xec00
>
> eth0:1 Link encap:Ethernet HWaddr 00:01:03:34:6C:B4
> inet addr:192.168.238.60 Bcast:192.168.238.255
>
>
> 1) What does eth0:1 mean? Could it be ip aliasing? I'm running RH9 - a
> stock kernel I believe, which I don't think has ip aliasing support
> because its deprecated, but I'm not sure.


I think I've seen this in context of VLAN or bridge devices.
But maybe I'm mistaken...

Regards,
Andreas

--

Dipl.-Biol. Andreas Wilm
wilm <AT> biophys <DOT> uni-duesseldorf <DOT> de
================================================
Heinrich-Heine-Universitaet Duesseldorf
Institut fuer Physikalische Biologie
http://www.biophys.uni-duesseldorf.de/~wilm
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 03:27 PM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0