----- Original Message ----- 
From: "Alan S. Jones" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, April 18, 2004 9:43 PM
Subject: [WinPcap-users] WinPcap & NMap


>
>
> I have been watching some of the WinPcap 3.1 beta development along with
> NMap development.  At one point I ran into some problems with NMap after I
> upgraded to WinPcap 3.1 beta.  Not figuring anything else out till I ran
> across some comments that made me downgrade to WinPcap 3.0 and things
> seemed to work fine.
>
> My impression from reading the WinPcap list was that programs should not
> need to make any changes to work between WinPcap 3.0 and 3.1.

Yes, If they use the pcapXXX API. You can have problems only if you use the
PacketXXX API. And nmap is actually using the PcapXXX API (line 308 of
winip.c in the nmap 3.50 sources). A clean solution to the problem is to use
pcap_findalldevs(), which is available on both WinPcap and libpcap from
quite a lot of time.

> Is this a bug in WinPcap?  Is the fix proposed the best fix?  It might be
> nice if the right people on each side talked if needed.

This is a bit disappointing: we sent a mail to this mailing list proposing
some changes in the PacketXXX API (clearly stating the possible breaks in
current applications) at the end of August 2003. Nobody told us "hey, Nmap
will stop working!".

At the beginning of february 2004, we released WinPcap 3.1beta. This version
was the first release having these PacketXXX API modifications (they were
documented both in the announce message posted on this mailing list, and in
the WinPcap online changelog). Some users reported a problem with nmap (on
the winpcap-bugs mail address), and we advised them to contact the nmap
developers.

I think we did our best to help our users. There are tons of apps based on
winpcap, we cannot contact their authors one by one telling them "hey, have
you tested your app with the newest winpcap? Does it work for you?" or
something like that. What we do is to announce our releases (and send
"request for comments") on the winpcap-users mailing.

Sorry for the long mail.

Have a nice day
GV

>
> This is the URL of the start of a thread in the NMap group about a fix to
> get 3.1 to work:
> http://seclists.org/lists/nmap-dev/2004/Jan-Mar/0077.html
>
>
> You can see the whole thread here:
> http://seclists.org/lists/nmap-dev/2004/Jan-Mar/
>
> List info:
> http://seclists.org/#nmap-dev
>
>
>
> --
> Alan S. Jones
> [EMAIL PROTECTED]
> http://users.ipa.net/~asj
>
>
>
> ==================================================================
>  This is the WinPcap users list. It is archived at
>  http://www.mail-archive.com/[EMAIL PROTECTED]/
>
>  To unsubscribe use
>  mailto: [EMAIL PROTECTED]
> ==================================================================
>





==================================================================
 This is the WinPcap users list. It is archived at
 http://www.mail-archive.com/[EMAIL PROTECTED]/

 To unsubscribe use 
 mailto: [EMAIL PROTECTED]
==================================================================

Reply via email to