RE: Sniffers, scanners and XP raw packet drivers

[gwasson () icsalabs com]

Here are the docs from the ethereal web page. I was able to make it work
with XP Pro using the beta WinPCAP driver.

G.

If you are using Windows XP, read the next two paragraphs before proceeding
any further!!! 
If you are using Windows XP, the current version of the WinPcap packet
driver will NOT work; you will have to use the 2.3 beta version. As it is a
beta version, it may have more bugs than the current version; please report
those bugs to winpcap () netgroup-serv polito it, so that they can try to fix
them for the final 2.3 release. 

The 2.3 beta download is available from the WinPcap download page; it
appears after the 2.2 download. If you are using Windows XP, do not download
and install WinPcap 2.2, as it will not work. If you want to be able to
capture packets with Ethereal on Windows XP, you must download and install
the 2.3 beta version; note that it's a beta version, so if you install it,
the risk that you will encounter bugs is greater. 


-----Original Message-----
From: Simon [mailto:simon () derision net]
Sent: Thursday, December 13, 2001 7:51 AM
To: PenTest
Subject: Sniffers, scanners and XP raw packet drivers


Folks,

Anyone had any success getting Ethereal and other tools to work under
Windows XP Pro?
even if Winpcap installed:

  Ethereal won't find an interface, 
  ISS can't find raw packet drivers for some of its scans are disabled
  Nmapnt can't find any suitable interfaces
  Foundstone fport won't resolve ports to process owners (although fscan
and superscan run fine)
  .... (the list goes on)

All these worked on my laptop nicely under Windows 2000? Does anyone
have a solution to this? I guess what I need is a raw packet capture
driver that works under winXP... Any ideas?

Aaarrrgggh,

Simon, CISSP



----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/