Re: Nmap on x64 Vista?

["Gianluca Varenni" <gianluca.varenni () gmail com>]

----- Original Message ----- 
From: "Rob Nicholls" <robert () everythingeverything co uk>
To: "'Fyodor'" <fyodor () insecure org>; "'Kris Katterjohn'" 
<katterjohn () gmail com>
Cc: <nmap-dev () insecure org>
Sent: Saturday, March 22, 2008 7:31 AM
Subject: RE: Nmap on x64 Vista?


> I just tried my VM of Windows 2008 x64 using the WinPcap files that are 
> part
> of Nmap and I got the familiar dnet error that suggests WinPcap hasn't 
> been
> properly installed (the Admin account in 2008 doesn't suffer from UAC,
> thanks to a lovely group policy setting, so it's definitely not the
> privilege problem that causes the same generic error message).
>
> I force installed the official WinPcap 4.0.2 over the top and the scan
> appears to work now (didn't even have to close Zenmap hehe). This does
> suggest to me that something isn't right with Nmap's WinPcap installer. I
> think that it's the same Vista packet.dll and npf.sys files, I'm not
> entirely sure offhand why the Nmap installer doesn't work. Perhaps 
> Gianluca
> can beat me to the reason why.

On a x64 machine you need to install the 64bit version of npf.sys. And the 
installation can be a lil tricky from a 32bit installer, as normally 
\windows\system32\drivers is not accessible from a 32bit application.

Have a nice day
GV

> Is there any reason why we can't include the official WinPcap installer
> instead of constantly tweaking Nmap's own version?
> http://www.winpcap.org/misc/copyright.htm
>
>
> Rob
>
>
> -----Original Message-----
> From: Rob Nicholls [mailto:robert () everythingeverything co uk]
> Sent: 22 March 2008 12:07
> To: 'Fyodor'; 'Kris Katterjohn'
> Cc: nmap-dev () insecure org
> Subject: RE: Nmap on x64 Vista?
>
> I'm afraid I've gone away for the Easter weekend, otherwise I would have
> posted something definitive by now. I do have with me a VMWare copy of
> Windows 2008 x64 using bridged networking that should work the same way as
> Vista SP1 x64 (once I plug the laptop into a switch, as it doesn't get an 
> IP
> address over DHCP using wireless), and I grabbed the Vista + SP1 x64 image
> from Microsoft last night so I should be able to try that later today.
> Otherwise it'll have to wait until I'm back home on Monday (at which point 
> I
> can check with Vista RTM x64 too).
>
> The usual problem with Vista x64 is a lack of signed drivers, but the
> WinPcap driver is signed, so as long as the Nmap version is identical to 
> the
> WinPcap version's install, I can't see Nmap on Vista x64 being a problem.
>
> Rob
>
> -----Original Message-----
> From: Fyodor [mailto:fyodor () insecure org]
> Sent: 22 March 2008 06:21
> To: Kris Katterjohn
> Cc: nmap-dev () insecure org
> Subject: Re: Nmap on x64 Vista?
>
> On Sat, Mar 22, 2008 at 01:12:22AM -0500, Kris Katterjohn wrote:
> > There is a guy on a forum I frequent with a 64-bit Vista install.  I
> > asked him if he could try to install Nmap 4.60 on it and see how it runs.
> >
> > He says it installed fine (with the included WinPcap), and Zenmap comes
> > up great.  However, he didn't actually scan because he got too bored
> > trying to fix the seemingly common libdnet error pertaining to Ethernet
> > devices (I linked to a couple nmap-dev postings, but he said it didn't
> > help--I didn't push too hard when he professed his lack of further
> > interest).
>
> Thanks Kris.  So, in other words, it didn't work for him :(.  Do you
> still have the exact error message he received?  Did you two try any
> of the possible solutions, and if so which ones didn't work?
>
> Anyone else have Vista x64 they can try?
>
> Cheers,
> -F
>
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://SecLists.Org
>
>
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://SecLists.Org
>
>
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://SecLists.Org 


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org