RE: side-by-side config issue

["Rob Nicholls" <robert () everythingeverything co uk>]

I've tested the current Nmap installer on a fairly clean install of Windows Server 2008 x64 and Nmap (and Zenmap) 
seemed to work okay. In theory Vista SP1 x64 should be virtually identical, so I'm not entirely sure why Nmap is 
failing for Marc-André. I'll see if I can fire up a Vista x64 virtual machine at some point to confirm if the current 
installer works on there too.

Nmap 4.68 (not including the Zenmap files*) should only use the Visual C++ 2008 runtime DLLs; older 4.6x versions did 
have a mix of Visual C++ 2005 and 2008 dependencies, but that should have been corrected in the current version. The 
Nmap installer will silently run the vcredist_x86.exe, which should install the necessary WinSxS files and settings 
(and is also why the file is not left in the Nmap folder, but I could perhaps leave it there if the installation 
fails); however the current version of the Nmap installer will not warn the user if the silent installation fails 
(something I hope to rectify as soon as my friends and family stop getting married and I finally get some free time to 
continue working on the two NSI files).

I think the DWI file indicated that the following files were missing (Google translates the error message to "file 
specified is not found"):

MSVCR90.DLL (Visual C++ 2008)
MSVCP90.DLL (Visual C++ 2008)
WPCAP.DLL (WinPcap)
PACKET.DLL (WinPcap)

If correct, and I don't have much experience reading DWI files from another machine, this suggests that both the 
WinPcap and the Visual C++ 2008 installers did not install their files, which might hint at a larger problem than just 
WinSxS.

After installing the vcredist_x86.exe file (which I assume did not produce any error messages?), is Marc-André still 
getting exactly the same WinSxS error message? Although it's affecting Nmap, the vcredist_x86.exe installer is 
Microsoft's and if it doesn't work there's not much we can do about it (except perhaps switch to including the 2 DLLs 
and a manifest file in the Nmap folder as a possible workaround, and abandon a proper installation of the runtimes).

Was WinPcap installed too? If it was, can you find Packet.dll and wpcap.dll installed at "C:\Windows\SysWOW64\"? Is 
npf.sys installed at "C:\Windows\System32\drivers"? 

A forum post about a similar Vista WinSxS issue with the Visual C++ 2005 runtimes suggested the problem was caused by a 
non-default configuration, but sadly doesn't suggest what the configuration problem was: 
http://forums.microsoft.com/msdn/showpost.aspx?postid=1497024&siteid=1&sb=0&d=1&at=7&ft=11&tf=0&pageid=1

I'm afraid this could be a tricky one to diagnose.

For reference, here's a screenshot of Zenmap having successfully run Nmap, taken from a Windows Server 2008 x64 host:

http://www.everythingeverything.co.uk/files/zenmap_nmap_2008_x64.png


Rob

* Zenmap is built using py2exe and relies on msvcr71.dll (included during installation) being present in the zenmap 
folder.


> -----Original Message-----
> From: Brandon Enright [mailto:bmenrigh () ucsd edu]
> Sent: 15 August 2008 01:44
> To: nmap-dev () insecure org
> Cc: Marc-André Turcotte; bmenrigh () ucsd edu
> Subject: Re: side-by-side config issue
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Marc-André got back to me with output so I'll re-post some of the info
> here.
>
> On Fri, 15 Aug 2008 00:00:20 +0000
> Brandon Enright <bmenrigh () ucsd edu> wrote:
> ...snip...
> > This would be the Windows Event Log (eventvwr.msc).  Can you dig into
> > the event log error and give us that information?
>
> The (translated from French) event log error is:
> The creation of the activation context failed for C:\Program Files
> (x86)\Nmap\nmap.exe . Dependant assembly
> Microsoft.VC90.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9
> a1e18e3b",type="win32",version="9.0.21022.8"
> cannot be found. Use sxstrace.exe for an advanced diagnostic.
>
> ...snip...
> > I'd also be interested in the output of the the Dependency Walker
> when
> > run against nmap.exe  You can grab a copy here:
> >
> > http://www.dependencywalker.com/
> >
> > Of particular interest are missing DLLs but unbound and unresolved
> > imports are also useful.
>
> The output of depends.exe is rather large (2.5 megs) so rather than
> attach it, I've uploaded it here:
> http://noh.ucsd.edu/~bmenrigh/nmap_vista64.dwi
>
> I don't have a working Windows box to load the output up in right now
> but I suspect it will show the missing VC90 runtime DLL.  Does anyone
> happen to know if the standard runtime installer will work for Vista64?
>
> Brandon
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.9 (GNU/Linux)
>
> iEYEARECAAYFAkik0VUACgkQqaGPzAsl94KJmACfV2hqBj1d1tzDgslUhoyY4vq2
> BssAoJ6c0z/n7kTj1ZQwHk7Nj2gSJzrW
> =9KXz
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://SecLists.Org


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org