Re: Weird Nmap behaviour on Windows (Latest SVN version)

[David Fifield <david () bamsoftware com>]

On Wed, Jul 07, 2010 at 06:46:32PM +0200, Luis MartinGarcia wrote:
> It took a bit longer than I expected but I've finally been able to
> trace the problem to revision r17542, which makes substantial changes
> to libdnet. Here's the output that proves it ;-)
>
>
> C:\Users\Luis\Desktop\nmap-repo\nmap>svn update -r 17542
> --ignore-externals . nsock nbase zenmap ncat nping
> U    nmap-service-probes
> U    tcpip.cc
> U    nselib\smb.lua
> U    CHANGELOG
> U    docs\nmap-install.xml
> U    nmap-os-db
> U    output.cc
> U    TargetGroup.cc
> U    scan_engine.cc
> U    todo\nmap.txt
> U    libdnet-stripped\include\dnet\intf.h
> U    libdnet-stripped\src\eth-win32.c
> U    libdnet-stripped\src\intf-win32.c
> Updated to revision 17542.
> Updated to revision 17542.
> Updated to revision 17542.
> Updated to revision 17542.
> U    ncat\ncat_listen.c
> Updated to revision 17542.
> U    nping\common.cc
> Updated to revision 17542.
>
> C:\Users\Luis\Desktop\nmap-repo\nmap>cd mswin32
>
> C:\Users\Luis\Desktop\nmap-repo\nmap\mswin32>cd Debug
>
> C:\Users\Luis\Desktop\nmap-repo\nmap\mswin32\Debug>nmap.exe
> scanme.insecure.org -p80
>
> Starting Nmap 5.30BETA1 ( http://nmap.org ) at 2010-07-07 18:34
> Romance Daylight Time
> dnet: Failed to open device eth14
> QUITTING!
>
> C:\Users\Luis\Desktop\nmap-repo\nmap\mswin32\Debug>cd ..
>
> C:\Users\Luis\Desktop\nmap-repo\nmap\mswin32>cd ..
>
> C:\Users\Luis\Desktop\nmap-repo\nmap>svn update -r 17541
> --ignore-externals . nsock nbase zenmap ncat nping
> U    libdnet-stripped\include\dnet\intf.h
> U    libdnet-stripped\src\eth-win32.c
> U    libdnet-stripped\src\intf-win32.c
> Updated to revision 17541.
> Updated to revision 17541.
> Updated to revision 17541.
> Updated to revision 17541.
> Updated to revision 17541.
> Updated to revision 17541.
>
> C:\Users\Luis\Desktop\nmap-repo\nmap>cd mswin32
>
> C:\Users\Luis\Desktop\nmap-repo\nmap\mswin32>cd Debug
>
> C:\Users\Luis\Desktop\nmap-repo\nmap\mswin32\Debug>nmap.exe
> scanme.insecure.org -p80
>
> Starting Nmap 5.30BETA1 ( http://nmap.org ) at 2010-07-07 18:40
> Romance Daylight Time
> Nmap scan report for scanme.insecure.org (64.13.134.52)
> Host is up (0.18s latency).
> rDNS record for 64.13.134.52: scanme.nmap.org
> PORT   STATE SERVICE
> 80/tcp open  http
>
> Nmap done: 1 IP address (1 host up) scanned in 14.67 seconds

Luckily we had prepared a debug release around the time of this change.
Try running --iflist with these two releases and send me the output.

http://nmap.org/dist/nmap-5.30BETA1-debug1-win32.zip
http://nmap.org/dist/nmap-5.30BETA1-debug2-win32.zip

They are from these two messages.

http://seclists.org/nmap-dev/2010/q2/446
http://seclists.org/nmap-dev/2010/q2/459

Are any of your interfaces using "network teaming"?

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/