RE: Sniffers, scanners and XP raw packet drivers

["Marc Maiffret" <marc () eeye com>]

nmapNT will be updated soon to work on XP.

As for ISS, foundstone, they are going to have to fix those themselves as
the drivers are their own.

iris,retina,secureiis, all work under XP.

if your just lookin for a raw packet driver that works under XP I believe
the winpcap ones might.
http://netgroup-serv.polito.it/winpcap/install/default.htm

Signed,
Marc Maiffret
Chief Hacking Officer
eEye Digital Security
T.949.349.9062
F.949.349.9538
http://eEye.com/Retina - Network Security Scanner
http://eEye.com/Iris - Network Traffic Analyzer
http://eEye.com/SecureIIS - Stop known and unknown IIS vulnerabilities

| -----Original Message-----
| From: Simon [mailto:simon () derision net]
| Sent: Thursday, December 13, 2001 4:51 AM
| To: PenTest
| Subject: Sniffers, scanners and XP raw packet drivers
|
|
| Folks,
|
| Anyone had any success getting Ethereal and other tools to work under
| Windows XP Pro?
| even if Winpcap installed:
|
|   Ethereal won't find an interface,
|   ISS can't find raw packet drivers for some of its scans are disabled
|   Nmapnt can't find any suitable interfaces
|   Foundstone fport won't resolve ports to process owners (although fscan
| and superscan run fine)
|   .... (the list goes on)
|
| All these worked on my laptop nicely under Windows 2000? Does anyone
| have a solution to this? I guess what I need is a raw packet capture
| driver that works under winXP... Any ideas?
|
| Aaarrrgggh,
|
| Simon, CISSP
|
|
|
| ------------------------------------------------------------------
| ----------
| This list is provided by the SecurityFocus Security Intelligence
| Alert (SIA)
| Service. For more information on SecurityFocus' SIA service which
| automatically alerts you to the latest security vulnerabilities
| please see:
| https://alerts.securityfocus.com/
|
|


----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/