How to make TCP Idle Scan

[zeys]

Hello,

I want to do a TCP idle scan with metasploit & nmap

But I keep having a problem with Metasploit. Here is what I do and the error I get.

msf > use auxiliary/scanner/ip/ipidseq

msf auxiliary(ipidseq) > set RHOSTS 192.168.1.0/24

RHOSTS => 192.168.1.0/24

msf auxiliary(ipidseq) > set THREADS 50

THREADS => 50

msf auxiliary(ipidseq) > run

usbmon1: ERROR while getting interface flags: No such device

[-] Auxiliary failed: RuntimeError invalid bpf filter

[-] Call stack:

[-] /opt/metasploit/msf3/lib/msf/core/exploit/capture.rb:113:in `setfilter'

[-] /opt/metasploit/msf3/lib/msf/core/exploit/capture.rb:113:in `open_pcap'

[-] /opt/metasploit/msf3/modules/auxiliary/scanner/ip/ipidseq.rb:60:in `run_host'

[-] /opt/metasploit/msf3/lib/msf/core/auxiliary/scanner.rb:94:in `block in run'

[-] /opt/metasploit/msf3/lib/msf/core/thread_manager.rb:100:in `call'

[-] /opt/metasploit/msf3/lib/msf/core/thread_manager.rb:100:in `block in spawn

At this point I have no clue what to do. I have searched for a solution for two hours straight now and found nothing.
Thanks ahead of time.

[no42]

Your network device is set to usbmon1, shouldn't it be eth0 or wlan0 depending on network/wifi network?

Do a "show options". You probably need "set interface eth0" or something similar.

[digip]

Don't you need to set a LHOST for this to work as wll? Refardless of interface, you need an LHOST IP set or set to 0.0.0.0 as a listener locally so that any open interface would see it, no? Don't know what usbmon1 is but I don't see a LHOST set in the above commands, try showing the options to see what it required.

http://www.offensive-security.com/metasploit-unleashed/Msfconsole_Commands#setg

http://www.offensive-security.com/metasploit-unleashed/Msfconsole_Commands#options

[airman_dopey]

if that's the case you can also do a setg to set your selection as the default

[digip]

if that's the case you can also do a setg to set your selection as the default

Looks like we posted at the same time..lol