eth_send of ARP packet returned -1 rather than expected 42

eth_send of ARP packet returned -1 rather than expected 42

[Marco Berizzi]

Hi Folks,

I'm getting this message when I run nmap 7.70 with
linux 4.20

Starting Nmap 7.70 ( https://nmap.org ) at 2019-01-07 16:15 CET
Initiating ARP Ping Scan at 16:15
Scanning 10.81.104.82 [1 port]
WARNING: eth_send of ARP packet returned -1 rather than expected 42 (errno=22: Invalid argument)
WARNING: eth_send of ARP packet returned -1 rather than expected 42 (errno=22: Invalid argument)
Completed ARP Ping Scan at 16:15, 0.42s elapsed (1 total hosts)
Nmap scan report for 10.81.104.82 [host down]
Read data files from: /usr/bin/../share/nmap
Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn
Nmap done: 1 IP address (0 hosts up) scanned in 0.46 seconds
           Raw packets sent: 2 (56B) | Rcvd: 0 (0B)
root@Calimero:/tmp# uname -a
Linux Calimero 4.20.0 #1 SMP Fri Dec 28 11:16:37 CET 2018 x86_64 Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz GenuineIntel GNU/Linux

Linux 4.20-rc5 was fine:

Starting Nmap 7.70 ( https://nmap.org ) at 2019-01-07 16:22 CET
Initiating ARP Ping Scan at 16:22
Scanning 10.68.68.56 [1 port]
Completed ARP Ping Scan at 16:22, 0.02s elapsed (1 total hosts)
Initiating Parallel DNS resolution of 1 host. at 16:22
Completed Parallel DNS resolution of 1 host. at 16:22, 0.01s elapsed
Initiating SYN Stealth Scan at 16:22
Scanning 10.68.68.56 [1000 ports]
Discovered open port 22/tcp on 10.68.68.56
Completed SYN Stealth Scan at 16:22, 0.03s elapsed (1000 total ports)
Nmap scan report for 10.68.68.56
Host is up (0.000081s latency).
Not shown: 999 closed ports
PORT   STATE SERVICE
22/tcp open  ssh
MAC Address: FC:4D:D4:2E:CD:81 (Universal Global Scientific Industrial)

Read data files from: /usr/bin/../share/nmap
Nmap done: 1 IP address (1 host up) scanned in 0.16 seconds
           Raw packets sent: 1001 (44.028KB) | Rcvd: 1001 (40.032KB)
root@Tarvos:~# uname -a
Linux Tarvos 4.20.0-rc5 #1 SMP Wed Dec 5 17:16:15 CET 2018 x86_64 Intel(R) Core(TM) i5-3320M CPU @ 2.60GHz GenuineIntel GNU/Linux

Any feedback are welcome.
Thanks in advance

Marco

Re: eth_send of ARP packet returned -1 rather than expected 42

[Ido Schimmel]

On Mon, Jan 07, 2019 at 04:26:30PM +0100, Marco Berizzi wrote:
> Hi Folks,
> 
> I'm getting this message when I run nmap 7.70 with
> linux 4.20
> 
> Starting Nmap 7.70 ( https://nmap.org ) at 2019-01-07 16:15 CET
> Initiating ARP Ping Scan at 16:15
> Scanning 10.81.104.82 [1 port]
> WARNING: eth_send of ARP packet returned -1 rather than expected 42 (errno=22: Invalid argument)
> WARNING: eth_send of ARP packet returned -1 rather than expected 42 (errno=22: Invalid argument)

Not sure it's the same issue, but can you test with commit 6b8d95f1795c
("packet: validate address length if non-zero")? It's in mainline
already and queued for -stable.

See similar report here:
https://www.spinics.net/lists/netdev/msg541807.html

> Completed ARP Ping Scan at 16:15, 0.42s elapsed (1 total hosts)
> Nmap scan report for 10.81.104.82 [host down]
> Read data files from: /usr/bin/../share/nmap
> Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn
> Nmap done: 1 IP address (0 hosts up) scanned in 0.46 seconds
>            Raw packets sent: 2 (56B) | Rcvd: 0 (0B)
> root@Calimero:/tmp# uname -a
> Linux Calimero 4.20.0 #1 SMP Fri Dec 28 11:16:37 CET 2018 x86_64 Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz GenuineIntel GNU/Linux
> 
> Linux 4.20-rc5 was fine:
> 
> Starting Nmap 7.70 ( https://nmap.org ) at 2019-01-07 16:22 CET
> Initiating ARP Ping Scan at 16:22
> Scanning 10.68.68.56 [1 port]
> Completed ARP Ping Scan at 16:22, 0.02s elapsed (1 total hosts)
> Initiating Parallel DNS resolution of 1 host. at 16:22
> Completed Parallel DNS resolution of 1 host. at 16:22, 0.01s elapsed
> Initiating SYN Stealth Scan at 16:22
> Scanning 10.68.68.56 [1000 ports]
> Discovered open port 22/tcp on 10.68.68.56
> Completed SYN Stealth Scan at 16:22, 0.03s elapsed (1000 total ports)
> Nmap scan report for 10.68.68.56
> Host is up (0.000081s latency).
> Not shown: 999 closed ports
> PORT   STATE SERVICE
> 22/tcp open  ssh
> MAC Address: FC:4D:D4:2E:CD:81 (Universal Global Scientific Industrial)
> 
> Read data files from: /usr/bin/../share/nmap
> Nmap done: 1 IP address (1 host up) scanned in 0.16 seconds
>            Raw packets sent: 1001 (44.028KB) | Rcvd: 1001 (40.032KB)
> root@Tarvos:~# uname -a
> Linux Tarvos 4.20.0-rc5 #1 SMP Wed Dec 5 17:16:15 CET 2018 x86_64 Intel(R) Core(TM) i5-3320M CPU @ 2.60GHz GenuineIntel GNU/Linux
> 
> Any feedback are welcome.
> Thanks in advance
> 
> Marco

Re: eth_send of ARP packet returned -1 rather than expected 42

[Marco Berizzi]

> Not sure it's the same issue, but can you test with commit 6b8d95f1795c
> ("packet: validate address length if non-zero")? It's in mainline
> already and queued for -stable.
> 
> See similar report here:
> https://www.spinics.net/lists/netdev/msg541807.html

Hi,

Thanks for the quick response. Yes indeed the problem is the same.
4.20.1-rc1 is working good again:

root@Calimero:~# nmap -v 10.81.104.82
Starting Nmap 7.70 ( https://nmap.org ) at 2019-01-08 10:04 CET
Initiating ARP Ping Scan at 10:04
Scanning 10.81.104.82 [1 port]
Completed ARP Ping Scan at 10:04, 0.02s elapsed (1 total hosts)
Initiating SYN Stealth Scan at 10:04
Scanning ntexve (10.81.104.82) [1000 ports]
Discovered open port 22/tcp on 10.81.104.82
Completed SYN Stealth Scan at 10:04, 0.03s elapsed (1000 total ports)
Nmap scan report for ntexve (10.81.104.82)
Host is up (0.00024s latency).
Not shown: 999 closed ports
PORT   STATE SERVICE
22/tcp open  ssh
MAC Address: 00:19:99:AB:0B:38 (Fujitsu Technology Solutions GmbH)

Read data files from: /usr/bin/../share/nmap
Nmap done: 1 IP address (1 host up) scanned in 0.13 seconds
           Raw packets sent: 1001 (44.028KB) | Rcvd: 1001 (40.032KB)
root@Calimero:~# uname -a
Linux Calimero 4.20.1-rc1 #1 SMP Mon Jan 7 17:52:46 CET 2019 x86_64 Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz GenuineIntel GNU/Linux
root@Calimero:~#