RE: New Comment: Installing WinPcap Silently

[Brian Desmond <brian () briandesmond com>]

Hi Rob-

I ran your version (e.g. I installed nmap). I was using the x64 build of WireShark.


Thanks,
Brian Desmond
brian () briandesmond com

c - 312.731.3132


> -----Original Message-----
> From: Rob Nicholls [mailto:robert () robnicholls co uk]
> Sent: Sunday, December 06, 2009 7:34 AM
> To: Brian Desmond
> Cc: nmap-dev () insecure org
> Subject: RE: New Comment: Installing WinPcap Silently
>
> Hi Brian,
>
> Did you install WinPcap 4.1.1 from WinPcap's official installer? Or did you run
> our version of the 4.1.1 installer separately? Were you using the 32-bit or 64-
> bit version of Wireshark?


> I'll try and look into the Wireshark issue in more detail, I know I tried their 64-
> bit version recently and had trouble with dumpcap.exe crashing (I wasn't
> sure if it was their fault or my fault, it was around the time they had issues
> with Marvell drivers causing Wireshark to crash). It's possible that our version
> of the installer doesn't do/install something that the official version does to
> enable 64-bit applications to work correctly, something that wouldn't have
> been spotted by us as Nmap is only 32-bit.
>
> One thing that might be worth noting is that the silent install of WinPcap will
> not modify the registry settings to allow WinPcap to start on boot (the GUI
> version will ask you what to do, and makes a recommendation for Windows
> 7/Vista/2008 users). This means you'd need to run any programs (Nmap or
> Wireshark) with admin rights in order for the npf service to start, but I can't
> imagine this would cause Wireshark to crash. I'll take a closer look once I've
> finished downloading 2008 R2 from Technet.
>
> Rob
>
> -----Original Message-----
> From: nmap-dev-bounces () insecure org [mailto:nmap-dev-
> bounces () insecure org]
> On Behalf Of Brian Desmond
> Sent: 30 November 2009 05:07
> To: nmap-dev () insecure org
> Subject: FW: New Comment: Installing WinPcap Silently
>
> Hi-
>
> The behavior I'm seeing is that if I install NMAP 5.10BETA1 with the /s switch
> on a WS08R2 x64 box, WireShark starts and crashes dumpcap.exe. It
> subsequently can't take any captures. If I install WinPcap 4.1.1 manually
> WireShark starts fine and can take captures.
>
> Thanks,
> Brian
>
>
> Thanks,
> Brian Desmond
> brian () briandesmond com<mailto:brian () briandesmond com>
>
> c - 312.731.3132
>
> Active Directory, 4th Ed - http://www.briandesmond.com/ad4/ Microsoft
> MVP - https://mvp.support.microsoft.com/profile/Brian
>
>
>
> From: graffiti () briandesmond com [mailto:graffiti () briandesmond com]
> Sent: Sunday, November 29, 2009 11:02 PM
> To: bdesmondwww () live com
> Subject: New Comment: Installing WinPcap Silently
>
>
> The following comment was received from post: RE: Installing WinPcap
> Silently<http://briandesmond.com/blog/installing-winpcap-
> silently/#comment-6
> 19>
>
> Comment stats:
>
>   *   Published: True
>   *   Spam Score: 1
>   *   Author: Fyodor
>   *   WebSite: http://nmap.org
>
> Comment:
>
> Nmap and our silent Winpcap installer should still be working on Windows
> 2008 R2. Have you tried Nmap 5.10BETA1? You can report any problems per
> the instructions at nmap.org/.../man-
> bugs.html<http://nmap.org/book/man-bugs.html>
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://seclists.org/nmap-dev/

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/