Re: Weird Nmap behaviour on Windows (Latest SVN version)

[Luis MartinGarcia <luis.mgarc () gmail com>]

Hi,

It took a bit longer than I expected but I've finally been able to
trace the problem to revision r17542, which makes substantial changes
to libdnet. Here's the output that proves it ;-)


C:\Users\Luis\Desktop\nmap-repo\nmap>svn update -r 17542
--ignore-externals . nsock nbase zenmap ncat nping
U    nmap-service-probes
U    tcpip.cc
U    nselib\smb.lua
U    CHANGELOG
U    docs\nmap-install.xml
U    nmap-os-db
U    output.cc
U    TargetGroup.cc
U    scan_engine.cc
U    todo\nmap.txt
U    libdnet-stripped\include\dnet\intf.h
U    libdnet-stripped\src\eth-win32.c
U    libdnet-stripped\src\intf-win32.c
Updated to revision 17542.
Updated to revision 17542.
Updated to revision 17542.
Updated to revision 17542.
U    ncat\ncat_listen.c
Updated to revision 17542.
U    nping\common.cc
Updated to revision 17542.

C:\Users\Luis\Desktop\nmap-repo\nmap>cd mswin32

C:\Users\Luis\Desktop\nmap-repo\nmap\mswin32>cd Debug

C:\Users\Luis\Desktop\nmap-repo\nmap\mswin32\Debug>nmap.exe
scanme.insecure.org -p80

Starting Nmap 5.30BETA1 ( http://nmap.org ) at 2010-07-07 18:34
Romance Daylight Time
dnet: Failed to open device eth14
QUITTING!

C:\Users\Luis\Desktop\nmap-repo\nmap\mswin32\Debug>cd ..

C:\Users\Luis\Desktop\nmap-repo\nmap\mswin32>cd ..

C:\Users\Luis\Desktop\nmap-repo\nmap>svn update -r 17541
--ignore-externals . nsock nbase zenmap ncat nping
U    libdnet-stripped\include\dnet\intf.h
U    libdnet-stripped\src\eth-win32.c
U    libdnet-stripped\src\intf-win32.c
Updated to revision 17541.
Updated to revision 17541.
Updated to revision 17541.
Updated to revision 17541.
Updated to revision 17541.
Updated to revision 17541.

C:\Users\Luis\Desktop\nmap-repo\nmap>cd mswin32

C:\Users\Luis\Desktop\nmap-repo\nmap\mswin32>cd Debug

C:\Users\Luis\Desktop\nmap-repo\nmap\mswin32\Debug>nmap.exe
scanme.insecure.org -p80

Starting Nmap 5.30BETA1 ( http://nmap.org ) at 2010-07-07 18:40
Romance Daylight Time
Nmap scan report for scanme.insecure.org (64.13.134.52)
Host is up (0.18s latency).
rDNS record for 64.13.134.52: scanme.nmap.org
PORT   STATE SERVICE
80/tcp open  http

Nmap done: 1 IP address (1 host up) scanned in 14.67 seconds

C:\Users\Luis\Desktop\nmap-repo\nmap\mswin32\Debug>


Regards,


Luis MartinGarcia.






On Wed, Jul 7, 2010 at 5:35 PM, Luis MartinGarcia. <luis.mgarc () gmail com> wrote:
> On 07/07/2010 05:09 PM, David Fifield wrote:
>
> On Wed, Jul 07, 2010 at 04:14:21PM +0200, Luis MartinGarcia. wrote:
>
>
> > I've found some weird Nmap behavior on Windows 7. Apparently Nmap
> > (also Nping) is not able to open my network interface. It says that is
> > unable to open "eth14". I've used the latest SVN version (r18639).
> > However, I can confirm that the problem must have been introduced
> > before the nmap-dedup branch merge, because I was able to reproduce it
> > with earlier revisions. Here's the list of versions I've tested:
> >
> > - Current SVN version: Does not work. (compiled with VS 2008)
> > - Nmap 5.30BETA1: Works fine (downloaded from insecure.org and installed)
> > - Nmap 5.10BETA1: Works fine (the one I had installed originally)
>
>
> Try to find the find the exact revision where this started working. This
> sounds like a lot of work but it probably only takes half an hour if you
> use a binary search. I recommend first testing r16969; that was just
> before a big change to interfaces and routing. nmap-dedup was merged in
> r17962, and we know that it is broken in that revision. That means there
> are only about 1000 revisions to binary search.
>
> Start with
>
> svn update -r 16969 --ignore-externals . nsock nbase zenmap ncat nping
>
> If that revision shows the problem, you'll have to go further back. (But
> no further than 5.10BETA1, which was r16181.) If it doesn't have the
> problem, I would next try
>
> svn update -r 16970 --ignore-externals . nsock nbase zenmap ncat nping
>
> because that's the most likely candidate. Then continue the binary
> search with
>
> svn update -r 17500 --ignore-externals . nsock nbase zenmap ncat nping
>
> and so on.
>
>
> No problem. I'll let you know when I find the exact revision.
>
> Luis MartinGarcia.
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/