Groups > comp.os.linux.development.system > #780

Re: ioctl SIOCGARP failed! errno: 6

Newsgroups	comp.os.linux.development.system
Date	2018-06-09 18:53 -0700
References	<5341a907-dabd-43e6-bdb8-2725edb893ad@googlegroups.com> <slrnphln20.31ka.grahn+nntp@frailea.sa.invalid> <004f2c98-fe4c-480f-8f04-497112b8c835@googlegroups.com> <slrnphn055.31ka.grahn+nntp@frailea.sa.invalid>
Message-ID	<1c8732ce-f5b0-47e3-8475-e32522cd7a6d@googlegroups.com> (permalink)
Subject	Re: ioctl SIOCGARP failed! errno: 6
From	Ohm Trivedi <ohmtrivedi@gmail.com>

Show all headers | View raw

On Saturday, June 9, 2018 at 3:24:25 AM UTC-4, Jorgen Grahn wrote:
> On Fri, 2018-06-08, Ohm Trivedi wrote:
> > On Friday, June 8, 2018 at 3:42:59 PM UTC-4, Jorgen Grahn wrote:
> >> On Fri, 2018-06-08, Ohm Trivedi wrote:
> >> > I am a graduate student and I am trying to use this tool,
> >> > Hershelplus
> >> > (https://github.com/zk7/hershelplus/tree/master/multi-platform), for
> >> > OS fingerprinting.
> >> >
> ...
> >> Did you try the more mainstream 'nmap' utility for OS
> >> fingerprinting.
> 
> > I have been using nmap as well. But nmap is not able to identify OS
> > for many IP addresses, so I am trying to find another tool to use
> > alongwith nmap.
> 
> Make sure to use recent versions of nmap; fingerprinting is something
> they have to tweak now and then.
> 
> Out of curiosity, why are you using OS fingerprinting?  I have found
> it interesting to use it now and then (and it illustrates that there
> are different IP stack implementations out there with different
> characteristics) but for actual attacks surely it's the /services/
> (and I guess the firewall) that are interesting?

My research is focused on determining OS-specific vulnerabilities, hence I am working on OS fingerprinting.
> 
> BTW (and this should have occurred to me much earlier) it's odd that
> ARP comes into the picture.  ARP can only reach hosts on a local,
> switched network, unlike IP which can reach all of the Internet.

The tool in question creates IP packets to send to a target. So in the process of creating IP packet, it uses ARP for getting the MAC address. That's my understanding so far. 
> 
> /Jorgen
> 
> -- 
>   // Jorgen Grahn <grahn@  Oo  o.   .     .
> \X/     snipabacken.se>   O  o   .

Back to comp.os.linux.development.system | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

ioctl SIOCGARP failed! errno: 6 Ohm Trivedi <ohmtrivedi@gmail.com> - 2018-06-08 10:24 -0700
  Re: ioctl SIOCGARP failed! errno: 6 Rainer Weikusat <rweikusat@talktalk.net> - 2018-06-08 20:32 +0100
  Re: ioctl SIOCGARP failed! errno: 6 Jorgen Grahn <grahn+nntp@snipabacken.se> - 2018-06-08 19:42 +0000
    Re: ioctl SIOCGARP failed! errno: 6 Ohm Trivedi <ohmtrivedi@gmail.com> - 2018-06-08 13:48 -0700
      Re: ioctl SIOCGARP failed! errno: 6 Jorgen Grahn <grahn+nntp@snipabacken.se> - 2018-06-09 07:24 +0000
        Re: ioctl SIOCGARP failed! errno: 6 Ohm Trivedi <ohmtrivedi@gmail.com> - 2018-06-09 18:53 -0700
          Re: ioctl SIOCGARP failed! errno: 6 Jorgen Grahn <grahn+nntp@snipabacken.se> - 2018-06-10 06:05 +0000
          Re: ioctl SIOCGARP failed! errno: 6 Rainer Weikusat <rweikusat@talktalk.net> - 2018-06-10 17:54 +0100
  Re: ioctl SIOCGARP failed! errno: 6 Ohm Trivedi <ohmtrivedi@gmail.com> - 2018-06-08 13:45 -0700
    Re: ioctl SIOCGARP failed! errno: 6 Rainer Weikusat <rweikusat@talktalk.net> - 2018-06-08 22:24 +0100

csiph-web