raw-sockets and Win-XP SP2

["Gisle Vanem" <giva () bgnett no>]

I've heard strong rumours that the upcoming Win-XP SP2 will disable
the use of SOCK_RAW sockets for any user (admin included). This 
will certainly hurt the use of nmap on Win-XP unless we go with
libnet for all platforms.

Steve Gibson (of www.grc.com) has been talking about the danger
of raw-sockets for years; "... have ANY practical need for raw 
sockets" [*] he claims. Yeah right. Seems MS is now listening to 
him. Yet for years they have deprecated the use of the ICMP API for 
ping-like programs. And advised us to use SOCK_RAW instead. Back 
to using icmp.dll again I guess.

I for one will not install the service-pack unless there's a loop-hole
to enable SOCK_RAW again. Anyone with additional info on this?

[*] http://www.grc.com/dos/sockettome.htm

--gv



---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List archive: http://seclists.org