OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: XP SP2 nmap incompatibility

From: Thor (thorHAMMEROFGOD.COM)
Date: Thu Aug 12 2004 - 16:59:44 CDT

Fyodor also said to try the --win_norawsock option worked in most cases.

----- Original Message -----
From: "Paul Wobbe" <pwobbeDATAFIX.COM>
To: <NTBUGTRAQLISTSERV.NTBUGTRAQ.COM>
Sent: Thursday, August 12, 2004 2:00 PM
Subject: Re: XP SP2 nmap incompatibility

I have found that I you set Namp to "do not ping" the IP and "do not
detect the OS" it works wit SP2.

Paul Wobbe
DataFix
600-8 King St E
Toronto, ON M5C 1B5

Phn (416) 363-8170 Ext 239
Fax (416) 363-8603
pwobbedatafix.com

-----Original Message-----
From: Ian Hayes [mailto:Ian.HayesDPSI-INC.COM]
Sent: Wednesday, August 11, 2004 11:56 AM
To: NTBUGTRAQLISTSERV.NTBUGTRAQ.COM
Subject: XP SP2 nmap incompatibility

Installed XP SP2 yesterday. While the installation was lengthy but
event-free, I did notice that nmap 3.55 stopped working correctly. I was
in between scanning subnets here on the network, and installed SP2.
After that, when I resumed my sweeps, I noticed that nmap was reporting
that any host I tried scanning had all its ports filtered. I tried
upgrading the Winpcap driver to the beta one, but that didn't improve
things. I doublechecked my Windows Firewall settings and verified that
it was set to OFF.

After removing SP2, I scanned a host with a known configuration and nmap
correctly identified the open ports and what OS it was running.

-----
NTBugtraq Editor's Note:

Want to reply to the person who sent this message? This list is configured
such that just hitting reply is going to result in the message coming to the
list, not to the individual who sent the message. This was done to help
reduce the number of Out of Office messages posters received. So if you want
to send a reply just to the poster, you'll have to copy their email address
out of the message and place it in your TO: field.
-----

-----
NTBugtraq Editor's Note:

Want to reply to the person who sent this message? This list is configured such that just hitting reply is going to result in the message coming to the list, not to the individual who sent the message. This was done to help reduce the number of Out of Office messages posters received. So if you want to send a reply just to the poster, you'll have to copy their email address out of the message and place it in your TO: field.
-----