RE: Nmap on x64 Vista?

["Rob Nicholls" <robert () everythingeverything co uk>]

I just tried my VM of Windows 2008 x64 using the WinPcap files that are part
of Nmap and I got the familiar dnet error that suggests WinPcap hasn't been
properly installed (the Admin account in 2008 doesn't suffer from UAC,
thanks to a lovely group policy setting, so it's definitely not the
privilege problem that causes the same generic error message).

I force installed the official WinPcap 4.0.2 over the top and the scan
appears to work now (didn't even have to close Zenmap hehe). This does
suggest to me that something isn't right with Nmap's WinPcap installer. I
think that it's the same Vista packet.dll and npf.sys files, I'm not
entirely sure offhand why the Nmap installer doesn't work. Perhaps Gianluca
can beat me to the reason why. 

Is there any reason why we can't include the official WinPcap installer
instead of constantly tweaking Nmap's own version?
http://www.winpcap.org/misc/copyright.htm


Rob


-----Original Message-----
From: Rob Nicholls [mailto:robert () everythingeverything co uk] 
Sent: 22 March 2008 12:07
To: 'Fyodor'; 'Kris Katterjohn'
Cc: nmap-dev () insecure org
Subject: RE: Nmap on x64 Vista?

I'm afraid I've gone away for the Easter weekend, otherwise I would have
posted something definitive by now. I do have with me a VMWare copy of
Windows 2008 x64 using bridged networking that should work the same way as
Vista SP1 x64 (once I plug the laptop into a switch, as it doesn't get an IP
address over DHCP using wireless), and I grabbed the Vista + SP1 x64 image
from Microsoft last night so I should be able to try that later today.
Otherwise it'll have to wait until I'm back home on Monday (at which point I
can check with Vista RTM x64 too).

The usual problem with Vista x64 is a lack of signed drivers, but the
WinPcap driver is signed, so as long as the Nmap version is identical to the
WinPcap version's install, I can't see Nmap on Vista x64 being a problem.

Rob

-----Original Message-----
From: Fyodor [mailto:fyodor () insecure org] 
Sent: 22 March 2008 06:21
To: Kris Katterjohn
Cc: nmap-dev () insecure org
Subject: Re: Nmap on x64 Vista?

On Sat, Mar 22, 2008 at 01:12:22AM -0500, Kris Katterjohn wrote:
> There is a guy on a forum I frequent with a 64-bit Vista install.  I
> asked him if he could try to install Nmap 4.60 on it and see how it runs.
>
> He says it installed fine (with the included WinPcap), and Zenmap comes
> up great.  However, he didn't actually scan because he got too bored
> trying to fix the seemingly common libdnet error pertaining to Ethernet
> devices (I linked to a couple nmap-dev postings, but he said it didn't
> help--I didn't push too hard when he professed his lack of further
> interest).

Thanks Kris.  So, in other words, it didn't work for him :(.  Do you
still have the exact error message he received?  Did you two try any
of the possible solutions, and if so which ones didn't work?

Anyone else have Vista x64 they can try?

Cheers,
-F

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org