RE: New Comment: Installing WinPcap Silently

["Rob Nicholls" <robert () robnicholls co uk>]

Hi Brian,

Did you install WinPcap 4.1.1 from WinPcap's official installer? Or did you
run our version of the 4.1.1 installer separately? Were you using the 32-bit
or 64-bit version of Wireshark?

I'll try and look into the Wireshark issue in more detail, I know I tried
their 64-bit version recently and had trouble with dumpcap.exe crashing (I
wasn't sure if it was their fault or my fault, it was around the time they
had issues with Marvell drivers causing Wireshark to crash). It's possible
that our version of the installer doesn't do/install something that the
official version does to enable 64-bit applications to work correctly,
something that wouldn't have been spotted by us as Nmap is only 32-bit.

One thing that might be worth noting is that the silent install of WinPcap
will not modify the registry settings to allow WinPcap to start on boot (the
GUI version will ask you what to do, and makes a recommendation for Windows
7/Vista/2008 users). This means you'd need to run any programs (Nmap or
Wireshark) with admin rights in order for the npf service to start, but I
can't imagine this would cause Wireshark to crash. I'll take a closer look
once I've finished downloading 2008 R2 from Technet.

Rob

-----Original Message-----
From: nmap-dev-bounces () insecure org [mailto:nmap-dev-bounces () insecure org]
On Behalf Of Brian Desmond
Sent: 30 November 2009 05:07
To: nmap-dev () insecure org
Subject: FW: New Comment: Installing WinPcap Silently

Hi-

The behavior I'm seeing is that if I install NMAP 5.10BETA1 with the /s
switch on a WS08R2 x64 box, WireShark starts and crashes dumpcap.exe. It
subsequently can't take any captures. If I install WinPcap 4.1.1 manually
WireShark starts fine and can take captures.

Thanks,
Brian


Thanks,
Brian Desmond
brian () briandesmond com<mailto:brian () briandesmond com>

c - 312.731.3132

Active Directory, 4th Ed - http://www.briandesmond.com/ad4/
Microsoft MVP - https://mvp.support.microsoft.com/profile/Brian



From: graffiti () briandesmond com [mailto:graffiti () briandesmond com]
Sent: Sunday, November 29, 2009 11:02 PM
To: bdesmondwww () live com
Subject: New Comment: Installing WinPcap Silently


The following comment was received from post: RE: Installing WinPcap
Silently<http://briandesmond.com/blog/installing-winpcap-silently/#comment-6
19>

Comment stats:

  *   Published: True
  *   Spam Score: 1
  *   Author: Fyodor
  *   WebSite: http://nmap.org

Comment:

Nmap and our silent Winpcap installer should still be working on Windows
2008 R2. Have you tried Nmap 5.10BETA1? You can report any problems per the
instructions at
nmap.org/.../man-bugs.html<http://nmap.org/book/man-bugs.html>
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/