Home page logo

nmap-dev logo Nmap Development mailing list archives

Re: Questions: interface names on win32
From: David Fifield <david () bamsoftware com>
Date: Fri, 30 Nov 2007 20:45:57 -0700

On Wed, Nov 28, 2007 at 09:15:26PM +0000, jah wrote:
I've just bought a new box with XP on it (no way am I going with Vista!) 
and I notice that the interface device name is not exactly identified 
with --iflist:

C:\Documents and Settings\jah>ipconfig

Windows IP Configuration
Ethernet adapter *Local Area Connection*:

        Connection-specific DNS Suffix  . :
        IP Address. . . . . . . . . . . . :
        Subnet Mask . . . . . . . . . . . :
        Default Gateway . . . . . . . . . :

C:\Documents and Settings\jah>nmap --iflist

Starting Nmap 4.23RC3 ( http://insecure.org ) at 2007-11-28 20:56 GMT 
Standard Time
*eth0* (eth0) ethernet up 00:19:21:3D:3F:CE
lo0  (lo0)     loopback up

eth0 \Device\NPF_{3F5D3A0C-7937-48BD-B9FD-B8B36D8884DD}
lo0  \Device\NPF_GenericDialupAdapter

DST/MASK           DEV  GATEWAY   eth0    lo0 eth0      eth0        lo0        eth0          eth0

is this by design or not?  Having googled, I can't see that anyone's 
ever mentioned this before and the manpage says only that --iflist 
"Prints the interface list and system routes as detected by Nmap."

I'm not sure, but I found this comment in libdnet-stripped/src/intf-win32.c:

/* Next we must find the pcap device name corresponding to the device.
   The device description used to be compared with those from
   PacketGetAdapterNames(), but that was unrelaible because dnet and
   pcap sometimes give different descriptions.  For example, dnet gave
   me "AMD PCNET Family PCI Ethernet Adapter - Packet Scheduler
   Miniport" for one of my adapters (in vmware), while pcap described it
   as "VMware Accelerated AMD PCNet Adapter (Microsoft's Packet
   Scheduler)". Plus, Packet* functions aren't really supported for
   external use by the WinPcap folks.  So I have rewritten this to
   compare interface addresses (which has its own problems -- what if
   you want to listen an an interface with no IP address set?) --Fyodor */

Starting Nmap 4.23RC3 ( http://insecure.org ) at 2007-11-28 21:06 GMT 
Standard Time
eth0 (eth0) ethernet up 00:13:CE:8A:74:3C
eth1 (eth1) ethernet up 00:16:36:06:7D:16
lo0  (lo0)     loopback up

eth1 \Device\NPF_{9E407963-4C68-4336-9008-3236DF509606}
lo0  \Device\NPF_{08CFDE0B-16EF-4DBB-B93C-386AB69B65FF}

Also, I observe that the wireless adapter doesn't have an entry under 
WINDEVICE....why's that?

I don't know what that is. I saw that phenomenon in some of the Vista
users' reports too.

David Fifield

Sent through the nmap-dev mailing list
Archived at http://SecLists.Org

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]