nmap has a runtime dependency of net-libs/libpcap compiled with ipv6 flag, otherwise most of the commands, especially the ones requiring root privileges fails with the following error: Error compiling our pcap filter: icmp6 not supported Reproducible: Always Steps to Reproduce: # nmap -sS -P0 -T4 -v -A -p0-65535 www.xxx.xx Starting Nmap 6.00 ( http://nmap.org ) at 2012-05-27 14:40 CEST Initiating Parallel DNS resolution of 1 host. at 14:40 Completed Parallel DNS resolution of 1 host. at 14:40, 0.01s elapsed Initiating SYN Stealth Scan at 14:40 Scanning www.xxx.xx (xx.193.193.123) [65536 ports] Error compiling our pcap filter: icmp6 not supported Expected Results: # nmap -sS -P0 -T4 -v -A -p0-65535 www.xxx.xx Starting Nmap 6.00 ( http://nmap.org ) at 2012-05-27 15:05 CEST Initiating Parallel DNS resolution of 1 host. at 15:05 Completed Parallel DNS resolution of 1 host. at 15:05, 0.09s elapsed Initiating SYN Stealth Scan at 15:05 Scanning www.xxx.xx (xx.193.193.123) [65536 ports] Discovered open port 80/tcp on xx.193.193.123 Discovered open port 3306/tcp on xx.193.193.123 Discovered open port 22/tcp on xx.193.193.123 Discovered open port 443/tcp on xx.193.193.123
Created attachment 313251 [details, diff] Ebuild patch to fix the issue
$ emerge --info Portage 2.1.10.63 (default/linux/amd64/10.0/desktop, gcc-4.5.3, glibc-2.15-r2, 3.4.0-next-20120524 x86_64) ================================================================= System uname: Linux-3.4.0-next-20120524-x86_64-Intel-R-_Core-TM-2_Duo_CPU_E8600_@_3.33GHz-with-gentoo-2.1 Timestamp of tree: Sun, 27 May 2012 10:35:01 +0000 app-shells/bash: 4.2_p28 dev-java/java-config: 2.1.11-r3 dev-lang/python: 2.7.3-r2, 3.2.3-r1 dev-util/cmake: 2.8.8-r2 dev-util/pkgconfig: 0.26 sys-apps/baselayout: 2.1-r1 sys-apps/openrc: 0.10.1 sys-apps/sandbox: 2.5 sys-devel/autoconf: 2.13, 2.69 sys-devel/automake: 1.9.6-r3, 1.10.3, 1.11.5 sys-devel/binutils: 2.22-r1 sys-devel/gcc: 4.5.3-r2 sys-devel/gcc-config: 1.7.1 sys-devel/libtool: 2.4.2 sys-devel/make: 3.82-r3 sys-kernel/linux-headers: 3.4 (virtual/os-headers) sys-libs/glibc: 2.15-r2 Repositories: gentoo wirelay poly-c asido ACCEPT_KEYWORDS="amd64 ~amd64" ACCEPT_LICENSE="* -@EULA" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=native -mtune=native -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /var/lib/hsqldb" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo" CXXFLAGS="-march=native -mtune=native -O2 -pipe" DISTDIR="/usr/portage/distfiles" FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles news parallel-fetch parse-eapi-ebuild-head protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch" FFLAGS="" GENTOO_MIRRORS="http://distfiles.gentoo.org" LANG="en_US.UTF-8" LC_ALL="en_US.UTF-8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" MAKEOPTS="-j3" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/var/lib/layman/wirelay /var/lib/layman/poly-c /usr/local/portage" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="X a52 aac acpi alsa amd64 berkdb bluetooth branding bzip2 cairo cdda cdr cli consolekit cracklib crypt cxx dbus dri dts dvd dvdr emboss encode exif fam firefox flac fortran g3dvl gdbm gif gpm iconv jpeg lcms ldap libnotify mad mmx mng modules mp3 mp4 mpeg mudflap multilib ncurses nls nptl nsplugin nvidia ogg opengl openmp optimization pam pango pcre pdf png policykit ppds pppd qt3support readline sdl session smp spell sse sse2 ssl startup-notification svg tcpd threads tiff truetype udev udisks unicode upower usb vaapi vdpau vim-syntax vmware-tools vorbis wxwidgets x264 xcb xinerama xml xorg xulrunner xv xvid zlib zsh-completion" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" INPUT_DEVICES="evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" PHP_TARGETS="php5-3" PYTHON_TARGETS="python3_2 python2_7" RUBY_TARGETS="ruby18 ruby19" USERLAND="GNU" VIDEO_CARDS="nvidia nouveau" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LINGUAS, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON
Confirmed. This happens to me too. I think it is because it is compiled for IPv6 support even though I explicitly unset that use flag on my system. However, the Nmap ebuild doesn't use that use flag and it must have been compiled with IPv6 support. Add the use flag for toggling support during build time should fix the issue. Some other people where having this problem and proposed this fix but they were compiling from source so to fix it here it must have the IPv6 support toggled by a use flag to prevent it from having that support while nothing else has that support. I am not sure why no one else has come to confirm the bug yet but I confirm it.
I got the sources from portage of nmap and libpcap then compiled libpcap without ipv6 support. I then compiled nmap without ipv6 support and told it to use the libpcap compiled earlier instead of the build-in version. Even in doing all of this the same error message is printed whenever it runs. So it isn't just that it doesn't pull in libpcap or that it insists on using ipv6 because even when those are disabled or I use a version of libpcap from the portage tree there are still errors. I am not sure what the error is.
Just got caught out by this one at a *very* inopportune moment. Too late to save face now, but please let me know if I can help with debugging or whatnot.
Fixed in 6.00 and 6.01. Thanks for reporting and for the patch. And apologies for the long wait.
I run through this today and had to enable the ipv6 flag on libpcap to get to install net-analyzer/nmap-6.01. What is the point in enabling more USE flags that you don't have interest in ?
