Skip to content

lzr does not work #38

@marek22k

Description

@marek22k
lzr \
    -sendSYNs \
    -sourceIP 172.22.149.250 \
    -handshakes dns,http,tls,ssh \
    -rn 4 \
    -rt 4 \
    -rate 20 \
    -sendInterface portscanning \
    < list.lst

list.lst:

172.22.149.224:80
172.22.149.224:443
172.22.149.224:53
172.22.149.224:22

lzr output:

++Writing results to file: default_20251107234332.json
++Handshakes: dns,http,tls,ssh
++Sending SYNs at a rate of:  20
++Using SourceIP: 172.22.149.250
++Using Sending Interface: portscanning
++Worker threads: 1
++Timeout Interval (s): 5
++Cooldown after completing (s): 8
++Retransmit Interval (s): 4
++Number of Retransmitions: 4
panic: Gateway Mac Address required

goroutine 7 [running]:
github.com/stanford-esrg/lzr.convertFromInputListToPacket({0xc0000d01c8, 0x11})
	/home/marek/lzr/packet.go:163 +0x39e
github.com/stanford-esrg/lzr.ConstructIncomingRoutine.func1()
	/home/marek/lzr/construct_main_routines.go:105 +0x30c
created by github.com/stanford-esrg/lzr.ConstructIncomingRoutine in goroutine 1
	/home/marek/lzr/construct_main_routines.go:59 +0x66

Connection works:

marek@meyrin-serv:~$ curl --head -v 172.22.149.224
*   Trying 172.22.149.224:80...
* Connected to 172.22.149.224 (172.22.149.224) port 80
* using HTTP/1.x
> HEAD / HTTP/1.1
> Host: 172.22.149.224
> User-Agent: curl/8.14.1
> Accept: */*
> 
* Request completely sent off
< HTTP/1.1 200 OK
HTTP/1.1 200 OK
< Server: nginx
Server: nginx
< Date: Fri, 07 Nov 2025 22:39:40 GMT
Date: Fri, 07 Nov 2025 22:39:40 GMT
< Content-Type: text/html; charset=UTF-8
Content-Type: text/html; charset=UTF-8
< Connection: keep-alive
Connection: keep-alive
< Content-Language: en
Content-Language: en
< X-Content-Type-Options: nosniff
X-Content-Type-Options: nosniff
< X-Frame-Options: DENY
X-Frame-Options: DENY
< Referrer-Policy: no-referrer
Referrer-Policy: no-referrer
< X-XSS-Protection: 1; mode=block
X-XSS-Protection: 1; mode=block
< Content-Security-Policy: default-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; style-src  'unsafe-inline' 'self'; style-src-elem  'unsafe-inline' 'self'; img-src 'self'; script-src  'unsafe-inline' 'self';
Content-Security-Policy: default-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; style-src  'unsafe-inline' 'self'; style-src-elem  'unsafe-inline' 'self'; img-src 'self'; script-src  'unsafe-inline' 'self';
< 

* Connection #0 to host 172.22.149.224 left intact
$ ip a s portscanning
4: portscanning: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1380 qdisc noqueue state UNKNOWN group default qlen 1000
    link/none 
    inet 172.22.149.250/32 scope global noprefixroute portscanning
       valid_lft forever preferred_lft forever
    inet6 fd04:234e:fc31::250/128 scope global noprefixroute 
       valid_lft forever preferred_lft forever
    inet6 fe80::ce24:354:71ce:20a0/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever

The interface is a WireGuard interface (therefore a Layer 3 interface) and therefore has no MAC address.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions