Nmap Development: RE: Nmap 4.23RC3 released

From: Sina Bahram <sbahram_at_nc.rr.com>
Date: Wed, 28 Nov 2007 21:52:28 -0500

I'm using vista ultimate, fully patched, and I am on wireless.

Here's the output of "nmap --iflist > out 2> err":

standard out:

***

Starting Nmap 4.23RC3 ( http://insecure.org ) at 2007-11-28 21:49 Eastern
Standard Time
************************INTERFACES************************
DEV (SHORT) IP/MASK TYPE UP MAC
net0 (net0) (null)/0 other down
net1 (net1) (null)/0 other down
net2 (net2) (null)/0 other down
net3 (net3) (null)/0 other down
net4 (net4) (null)/0 other down
net5 (net5) (null)/0 other down
eth0 (eth0) (null)/0 ethernet up 7E:54:20:52:41:53
eth1 (eth1) (null)/0 ethernet up 7E:54:20:52:41:53
eth2 (eth2) (null)/0 ethernet up 00:1D:D9:1B:49:EA
eth3 (eth3) (null)/0 ethernet up 7E:54:20:52:41:53
eth4 (eth4) (null)/0 ethernet down 00:1C:23:AF:A8:7A
eth5 (eth5) (null)/0 ethernet up 7E:54:20:52:41:53
eth6 (eth6) (null)/0 ethernet down 00:1A:6B:E6:78:38
eth7 (eth7) (null)/0 ethernet up 7E:54:20:52:41:53
eth8 (eth8) (null)/0 ethernet down 44:45:53:54:42:00
eth9 (eth9) (null)/0 ethernet down 00:1C:23:AF:A8:7A
eth10 (eth10) (null)/0 ethernet down 44:45:53:54:42:00
eth11 (eth11) (null)/0 ethernet up 00:1D:D9:1B:49:EA
eth12 (eth12) (null)/0 ethernet up 7E:54:20:52:41:53
eth13 (eth13) (null)/0 ethernet down 44:45:53:54:42:00
ppp0 (ppp0) (null)/0 other up
ppp1 (ppp1) (null)/0 other up
lo0 (lo0) 127.0.0.1/8 loopback up
net0 (net0) 192.168.1.100/24 other up
net1 (net1) (null)/0 other up
net0 (net0) (null)/0 other up
net1 (net1) (null)/0 other up
net2 (net2) (null)/0 other down
net3 (net3) (null)/0 other down
net4 (net4) (null)/0 other down
net5 (net5) (null)/0 other up
net6 (net6) (null)/0 other down
net7 (net7) (null)/0 other up
net8 (net8) (null)/0 other down

DEV WINDEVICE
net5 \Device\NPF_{4679B837-1A50-44C5-BEFE-B9B9DA9BEF47}
net6 \Device\NPF_{825FC102-8E38-4277-A479-1F1025A19ED4}
net7 \Device\NPF_{19AC61FA-78F5-4971-9DE6-3E027FB1C618}
net8 \Device\NPF_{14E0B8D8-5622-42B2-B668-02219743EDDE}

**************************ROUTES**************************
DST/MASK DEV GATEWAY
192.168.1.100/32 net0 192.168.1.100
255.255.255.255/32 lo0 127.0.0.1
127.0.0.1/32 lo0 127.0.0.1
127.255.255.255/32 lo0 127.0.0.1
192.168.1.255/32 net0 192.168.1.100
255.255.255.255/32 net0 192.168.1.100
192.168.1.0/0 net0 192.168.1.100
127.0.0.0/0 lo0 127.0.0.1
224.0.0.0/0 net0 192.168.1.100
224.0.0.0/0 lo0 127.0.0.1
0.0.0.0/0 net0 192.168.1.1

***

standard error:

***

_ifcombo_name: Mapping unknown interface type 1 to "net".

_ifcombo_name: Mapping unknown interface type 71 to "net".

_ifcombo_name: Mapping unknown interface type 131 to "net".

***

I have a dell latitude d830 and I'm using the dell 3945 wireless chipset.

Take care,
Sina

-----Original Message-----
From: nmap-dev-bounces_at_insecure.org [mailto:nmap-dev-bounces_at_insecure.org]
On Behalf Of David Fifield
Sent: Wednesday, November 28, 2007 9:47 PM
To: nmap-dev_at_insecure.org
Subject: Re: Nmap 4.23RC3 released

On Wed, Nov 28, 2007 at 08:35:32PM -0600, Alan Jones wrote:
> I am not sure why some reports of Vista errors are different then
> others.... I am running Vista Ultimate (fully patched)... don't know
> if that would make a difference.
>
> I uninstalled the old WinPcap, installed WinPcap 4.1 beta2 and things
> worked much better, but there were still some errors or odd reporting,
> not sure what it means... "_ifcombo_name: Mapping unknown interface
> type
> 131 to "net"." However after several of those it works...
>
> As a side note I am surprised Nmap did not report a little better OS
> info at scanning scanme.insecure.org.
>
> Below are the full results of my Nmap scan, errors and all.
>
> Starting Nmap 4.23RC3 ( http://insecure.org ) at 2007-11-28 20:23
> Central Standard Time
> _ifcombo_name: Mapping unknown interface type 131 to "net".
>
> _ifcombo_name: Mapping unknown interface type 131 to "net".
>
> _ifcombo_name: Mapping unknown interface type 131 to "net".
>
> _ifcombo_name: Mapping unknown interface type 131 to "net".

Hi Alan. This is a message to help us debug Nmap on wireless interfaces on
Vista. 131 is IF_TYPE_TUNNEL. Wireless Vista users are additionally
reporting 71, IF_TYPE_IEEE80211 and in one case 1, IF_TYPE_OTHER.

What does "nmap --iflist" display?

David Fifield

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org
Received on Nov 28 2007