npcap icon indicating copy to clipboard operation
npcap copied to clipboard

Published 20 hours ago • verified publisher icon nmap

eth0

Open 24allday opened this issue 3 years ago • 5 comments

name: Nmap eth0 issue about: Report an issue with Nmap labels: Nmap dnet assignees: ?

Describe the bug When I run nmap the following error message appears "dnet: Failed to open device eth0 QUITTING!". I have installed many versions and have also tried to modify the registry but, still no success. It was working before. I think the issue came after i installed my virtual box. I saw another post which mentioned that sometimes this happens, then another post which provided a solution (coping the rule to eth0). After checking, I cannot find an eth0 that exists, perhaps this is my local connection. I am currently using vpn (wireguard). I am not sure if the vpn is the issue as I have run scans before with it. Or at least I think I have. Not really sure what to do now but I need to run scans at some point in life and it would be odd to only be able to do them without vpn. I am open to any suggestions. I just want it to work. even my Zenmap GUI displays the same issues.

To Reproduce This is with nearly all scans except the sL.

Expected behavior The normal working behaviours of Nmap are expected.

Version info (please complete the following information):

  • OS: [Windows 10]
  • ncat 7.92--version

Additional context No eth0 device is found or attached to anything when ipconfig /all is run.

24allday avatar Aug 04 '22 12:08 24allday

I think nmap may use interface names different from those of Windows - I have the impression that libdnet does, and that page claims nmap uses libdnet, so that may be where that's coming from - so "eth0" may correspond to a device in Windows with a different name. @fyodor, is that the case and, if so, what's the rule for mapping nmap names to Windows names?

guyharris avatar Aug 06 '22 07:08 guyharris

Hi,

Yes you are correct. I am just not good with terminology. That is what it is doing but I not know how to view the rules or seach for the folder. I saw a video on it but the guy done it for Linux which is a different command.

If you could help I would appreciate it.

On Sat, 6 Aug 2022 at 08:35 Guy Harris @.***> wrote:

I think nmap may use interface names different from those of Windows - I have the impression that libdnet http://libdnet.sourceforge.net does, and that page claims nmap uses libdnet, so that may be where that's coming from - so "eth0" may correspond to a device in Windows with a different name. @fyodor https://github.com/fyodor, is that the case and, if so, what's the rule for mapping nmap names to Windows names?

— Reply to this email directly, view it on GitHub https://github.com/nmap/npcap/issues/621#issuecomment-1207167362, or unsubscribe https://github.com/notifications/unsubscribe-auth/AYVMGSJLOUAIPTS3XJXWDCTVXYIS3ANCNFSM55SOXQVQ . You are receiving this because you authored the thread.Message ID: @.***>

24allday avatar Aug 06 '22 12:08 24allday

This message ("dnet: Failed to open device ____ QUITTING!") is a generic error produced when Nmap cannot open an adapter or get a list of adapters via Npcap. To get useful diagnostic info, we need the following information at minimum:

  1. Full output of nmap --version
  2. Output of nmap -d --iflist
  3. DiagReport output.

dmiller-nmap avatar Aug 19 '22 21:08 dmiller-nmap

Nmap version 7.92 ( https://nmap.org ) Platform: i686-pc-windows-windows Compiled with: nmap-liblua-5.3.5 openssl-1.1.1k nmap-libssh2-1.9.0 nmap-libz-1.2.11 nmap-libpcre-7.6 Npcap-1.70 nmap-libdnet-1.12 ipv6 Compiled without: Available nsock engines: iocp poll select

--iflist wpcap.dll present, library version: Npcap version 1.70, based on libpcap version 1.10.2-PRE-GIT Starting Nmap 7.92 ( https://nmap.org ) at 2022-08-20 01:39 GMT Daylight Time PORTS: Using top 1000 ports found open (TCP:1000, UDP:0, SCTP:0) INTERFACES DEV (SHORT) IP/MASK TYPE UP MTU MAC eth0 (eth0) 10.2.0.2/32 ethernet up 1420 00:00:00:00:00:00 eth1 (eth1) fh80::1123:c582:75a8:a017/64 ethernet down 65535 00:00:00:00:00:00 eth1 (eth1) 139.654.640.23/16 ethernet down 65535 00:00:00:00:00:00 eth2 (eth2) 156.434.362.1/16 ethernet down 1500 54:42:49:78:DB:59 eth3 (eth3) 152.448.56.1/24 ethernet up 1500 0A:00:27:00:00:0E eth4 (eth4) 145.254.368.14/16 ethernet down 1500 00:FF:8D:0A:47:75 eth5 (eth5) 145.209.201.2/16 ethernet down 1500 1A:DD:08:BC:6B:56 eth6 (eth6) 145.002.10.96/16 ethernet down 1500 2A:DD:08:BC:6B:56 eth7 (eth7) 145.001.1.204/24 ethernet up 1500 78:DD:08:BC:6B:56 eth8 (eth8) 145.000.216.112/16 ethernet down 1500 5A:DD:08:BC:6B:56 lo0 (lo0) ::1/128 loopback up -1 lo0 (lo0) 127.0.0.1/8 loopback up -1

DEV WINDEVICE eth0 \Device\NPF_{EAB2262D-9AB1-5975-7D92-33KFJKF88778} eth1 \Device\NPF_{AFDEECBA-DFBA-CAFF-5044-0138498CFACD} eth1 \Device\NPF_{AFDEECBA-DFBA-CAFF-5044-013124BCEAGG} eth2 \Device\NPF_{BC863AAA-54E2-4F05-A57B-550663D0HHDB} eth3 \Device\NPF_{91D49EC0-30A6-45F1-89D1-506FNJG78CC9} eth4 \Device\NPF_{8D0A4775-19AA-45EE-8059-7D8C4A0D653F} eth5 \Device\NPF_{E5B0FD78-F7DA-4DH3-B7Y2-2E05071B61D9} eth6 \Device\NPF_{DC0B2631-61JB-46JB-HF05-3YC617BFAD11} eth7 \Device\NPF_{C3FA99C0-6450-46D3-A554-YU208C430CB4} eth8 \Device\NPF_{226F90O3-C68C-4C3C-B8C8-695CHD618D36} lo0 \Device\NPF_Loopback lo0 \Device\NPF_Loopback \Device\NPF_{24BA876B-4595-4184-9672-B658650DCFF3} \Device\NPF_{AB29FFA3-E6D4-4E86-9F82-7E788I28410C} \Device\NPF_{02DBD963-DE1B-4A3C-A6B3-4480HJCA4A66}

ROUTES DST/MASK DEV METRIC GATEWAY 10.2.0.2/32 eth0 256 255.255.255.255/32 eth1 261 255.255.255.255/32 eth6 281 255.255.255.255/32 eth5 281 192.168.XX.X55/32 eth3 281 192.168.XX.1/32 eth3 281 255.255.255.255/32 eth3 281 255.255.255.255/32 eth4 281 255.255.255.255/32 eth2 281 192.168.1.XXX/32 eth7 311 192.168.1.255/32 eth7 311 255.255.255.255/32 eth7 311 255.255.255.255/32 eth8 311 255.255.255.255/32 lo0 331 127.0.0.1/32 lo0 331 127.255.255.255/32 lo0 331 192.168.XXX.XXX/24 eth3 281 192.168.1.0/24 eth7 311 127.0.0.0/8 lo0 331 224.0.0.0/4 eth1 261 224.0.0.0/4 eth4 281 224.0.0.0/4 eth3 281 224.0.0.0/4 eth6 281 224.0.0.0/4 eth5 281 224.0.0.0/4 eth2 281 224.0.0.0/4 eth8 311 224.0.0.0/4 eth7 311 224.0.0.0/4 lo0 331 0.0.0.0/0 eth0 0 0.0.0.0/0 eth7 55 192.168.1.xxx fe80::1123:c756:75a8:a016/548 eth1 261 ::1/128 lo0 331 fe80::/64 eth1 261 ff00::/8 eth1 261 ff00::/8 lo0 331

DiagReport for Npcap ( https://npcap.com )

Script Architecture: 64-bit Script Path: C:\Program Files\Npcap\DiagReport.ps1 Current Time: 08/19/2022 23:24:22 Npcap install path: C:\Program Files\Npcap Npcap Version: 1.70 PowerShell Version: 5.1.19041.1682

OS Info:

Caption : Microsoft Windows 10 Home BuildNumber : 19044 Locale : 0809 MUILanguages : {en-US} OSArchitecture : 64-bit ServicePackMajorVersion : 0 ServicePackMinorVersion : 0 SystemDirectory : C:\WINDOWS\system32 Version : 10.0.19044

CPU Info:

Name : Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz Manufacturer : GenuineIntel DeviceID : CPU0 NumberOfCores : 2 NumberOfEnabledCore : 47 NumberOfLogicalProcessors : 4 Addresswidth : 64

Memory Info:

Size: 3950 MB (4141973504 Bytes)

Network Adapter(s) Info:

Caption : [00000001] Qualcomm Atheros AR9285 Wireless Network Adapter GUID : Index : 1 InterfaceIndex : 22 Manufacturer : Qualcomm Atheros Communications Inc. MACAddress : Speed : 97500000 NetConnectionID : Wireless Network Connection NetConnectionStatus : 2 PNPDeviceID : PCI\VEN_168C&DEV_002B&SUBSYS_E017105B&REV_01\4&1EE949F9&0&00E0 ServiceName : athr AdapterType : Ethernet 802.3

Caption : [00000002] Marvell Yukon 88E8059 PCI-E Gigabit Ethernet Controller GUID : Index : 2 InterfaceIndex : 21 Manufacturer : Marvell MACAddress : Speed : 1000000000 NetConnectionID : Local Area Connection NetConnectionStatus : 7 PNPDeviceID : PCI\VEN_11 ServiceName : ykinw8 AdapterType : Ethernet 802.3

Caption : [00000015] TAP-ProtonVPN Windows Adapter V9 GUID : Index : 15 InterfaceIndex : 13 Manufacturer : TAP-ProtonVPN Windows Provider V9 MACAddress : Speed : 1000000000 NetConnectionID : Local Area Connection 4 NetConnectionStatus : 7 PNPDeviceID : ROOT\NET\0000 ServiceName : tapprotonvpn AdapterType : Ethernet 802.3

Caption : [00000016] Wintun Userspace Tunnel GUID : Index : 16 InterfaceIndex : 20 Manufacturer : WireGuard LLC MACAddress : Speed : 100000000000 NetConnectionID : ProtonVPN TUN NetConnectionStatus : 7 PNPDeviceID : ROOT\NET\0001 ServiceName : wintun AdapterType :

Caption : [00000017] WireGuard Tunnel GUID : Index : 17 InterfaceIndex : 28 Manufacturer : WireGuard LLC MACAddress : Speed : 100000000000 NetConnectionID : ProtonVPN NetConnectionStatus : 2 PNPDeviceID : SWD\WIREGUARD
ServiceName : WireGuard AdapterType :

Caption : [00000019] VirtualBox Host-Only Ethernet Adapter GUID : Index : 19 InterfaceIndex : 14 Manufacturer : Oracle Corporation MACAddress : 0A:00:27:00:00:0E Speed : 1000000000 NetConnectionID : VirtualBox Host-Only Network NetConnectionStatus : 2 PNPDeviceID : ROOT\NET\0003 ServiceName : VBoxNetAdp AdapterType : Ethernet 802.3

NDIS Light-Weight Filter (LWF) Info:

HKLM:\SYSTEM\CurrentControlSet\Control\Network{4d36e974-e325-11ce-bfc1-08002be10318}*:

InstallTimeStamp : {221, 7, 12, 0...} Characteristics : 262144 ComponentId : ms_bridge Description : @%SystemRoot%\system32\bridgeres.dll,-2 InfPath : netbrdg.inf InfSection : Install LocDescription : @%SystemRoot%\system32\bridgeres.dll,-2

InstallTimeStamp : {221, 7, 12, 0...} Characteristics : 262184 ComponentId : ms_wfplwf_lower Description : @%windir%\System32\drivers\wfplwfs.sys,-6006 InfPath : wfplwfs.inf InfSection : WfpLwf_Lower_Install LocDescription : @%windir%\System32\drivers\wfplwfs.sys,-6006

InstallTimeStamp : {221, 7, 12, 0...} Characteristics : 40 ComponentId : ms_netbios Description : @%windir%\system32\drivers\netbios.sys,-501 InfPath : netnb.inf InfSection : NetBIOS.ndi LocDescription : @%windir%\system32\drivers\netbios.sys,-501

InstallTimeStamp : {221, 7, 12, 0...} Characteristics : 262200 ComponentId : ms_ndiscap Description : @%windir%\System32\drivers\ndiscap.sys,-5000 InfPath : ndiscap.inf InfSection : Install LocDescription : @%windir%\System32\drivers\ndiscap.sys,-5000

InstallTimeStamp : {221, 7, 12, 0...} ComponentId : ms_server Description : @%systemroot%\system32\srvsvc.dll,-109 InfPath : Netserv.inf InfSection : Install.ndi LocDescription : @%systemroot%\system32\srvsvc.dll,-109

InstallTimeStamp : {221, 7, 12, 0...} Characteristics : 262144 ComponentId : vms_vsf Description : @%windir%\System32\drivers\vmswitch.sys,-60005 InfPath : wvms_vsft.inf InfSection : VMSVSF.ndi LocDescription : @%windir%\System32\drivers\vmswitch.sys,-60005

InstallTimeStamp : {221, 7, 12, 0...} Characteristics : 262184 ComponentId : ms_vwifi Description : @%windir%\System32\drivers\vwififlt.sys,-105 InfPath : netvwififlt.inf InfSection : Install LocDescription : @%windir%\System32\drivers\vwififlt.sys,-105

InstallTimeStamp : {230, 7, 8, 0...} Characteristics : 262144 ComponentId : INSECURE_NPCAP Description : @oem30.inf,%npf_desc_standard%;Npcap Packet Driver (NPCAP) InfPath : oem30.inf InfSection : FilterStandard LocDescription : @oem30.inf,%npf_desc_standard%;Npcap Packet Driver (NPCAP)

InstallTimeStamp : {230, 7, 8, 0...} Characteristics : 262144 ComponentId : INSECURE_NPCAP_WIFI Description : @oem30.inf,%npf_desc_wifi%;Npcap Packet Driver (NPCAP) (Wi-Fi) InfPath : oem30.inf InfSection : FilterWiFi LocDescription : @oem30.inf,%npf_desc_wifi%;Npcap Packet Driver (NPCAP) (Wi-Fi)

InstallTimeStamp : {221, 7, 12, 0...} Characteristics : 262144 ComponentId : ms_pacer Description : @%windir%\System32\drivers\pacer.sys,-101 InfPath : netpacer.inf InfSection : Install LocDescription : @%windir%\System32\drivers\pacer.sys,-101

InstallTimeStamp : {221, 7, 12, 0...} Characteristics : 262184 ComponentId : ms_wfplwf_upper Description : @%windir%\System32\drivers\wfplwfs.sys,-6005 InfPath : wfplwfs.inf InfSection : WfpLwf_Upper_Install LocDescription : @%windir%\System32\drivers\wfplwfs.sys,-6005

InstallTimeStamp : {221, 7, 12, 0...} Characteristics : 262184 ComponentId : ms_nativewifip Description : @%windir%\System32\drivers\nwifi.sys,-101 InfPath : netnwifi.inf InfSection : MS_NWIFI.Install LocDescription : @%windir%\System32\drivers\nwifi.sys,-101

InstallTimeStamp : {221, 7, 12, 0...} Characteristics : 262144 ComponentId : ms_wfplwf_vswitch Description : @%windir%\System32\drivers\wfplwfs.sys,-6004 InfPath : wfplwfs.inf InfSection : WfpLwf_vSwitch_Install LocDescription : @%windir%\System32\drivers\wfplwfs.sys,-6004

InstallTimeStamp : {221, 7, 12, 0...} Characteristics : 262184 ComponentId : ms_vfpext Description : Microsoft Azure VFP Switch Extension InfPath : vfpext.inf InfSection : Install LocDescription : Microsoft Azure VFP Switch Extension

InstallTimeStamp : {221, 7, 12, 0...} Characteristics : 262144 ComponentId : ms_l2bridge Description : @%SystemRoot%\System32\drivers\l2bridge.sys,-5000 InfPath : l2bridge.inf InfSection : Install LocDescription : @%SystemRoot%\System32\drivers\l2bridge.sys,-5000

Name DisplayName ComponentID Enabled

ProtonVPN Npcap Packet Driver (NPCAP) INSECURE_NPCAP True
Wireless Network Connection Npcap Packet Driver (NPCAP) INSECURE_NPCAP True
Wireless Network Connection Npcap Packet Driver (NPCAP) (Wi-Fi) INSECURE_NPCAP_WIFI True
Local Area Connection Npcap Packet Driver (NPCAP) INSECURE_NPCAP True
ProtonVPN TUN Npcap Packet Driver (NPCAP) INSECURE_NPCAP True
VirtualBox Host-Only Network Npcap Packet Driver (NPCAP) INSECURE_NPCAP True
Local Area Connection 4 Npcap Packet Driver (NPCAP) INSECURE_NPCAP True

File Info:

LastWriteTime : 08/09/2021 22:11:14 Length : 815 Name : CheckStatus.bat

LastWriteTime : 19/08/2022 23:24:19 Length : 0 Name : DiagReport-20220819-232418.txt

LastWriteTime : 09/06/2020 20:14:10 Length : 1073 Name : DiagReport.bat

LastWriteTime : 15/04/2022 05:44:12 Length : 18078 Name : DiagReport.ps1

LastWriteTime : 08/09/2021 22:11:24 Length : 2513 Name : FixInstall.bat

LastWriteTime : 19/08/2022 23:06:07 Length : 28508 Name : install.log

LastWriteTime : 19/05/2022 23:15:28 Length : 11784 Name : LICENSE

LastWriteTime : 24/06/2022 19:29:40 Length : 12561 Name : npcap.cat

LastWriteTime : 24/06/2022 19:29:40 Length : 8572 Name : npcap.inf

LastWriteTime : 24/06/2022 19:29:40 Length : 77376 Name : npcap.sys

LastWriteTime : 24/06/2022 19:29:40 Length : 2436 Name : npcap_wfp.inf

LastWriteTime : 24/06/2022 17:31:14 Length : 307192 Name : NPFInstall.exe

LastWriteTime : 19/08/2022 23:06:39 Length : 97325 Name : NPFInstall.log

LastWriteTime : 24/06/2022 19:31:02 Length : 1077272 Name : Uninstall.exe

Path : C:\Program Files\Npcap\npcap.cat Status : Valid StatusMessage : Signature verified. Thumbprint : 8B2627FECD69A799EC949D7989D90D4B3E8801AB

Path : C:\Program Files\Npcap\npcap.inf Status : Valid StatusMessage : Signature verified. Thumbprint : 8B2627FECD69A799EC949D7989D90D4B3E8801AB

Path : C:\Program Files\Npcap\npcap.sys Status : Valid StatusMessage : Signature verified. Thumbprint : 8B2627FECD69A799EC949D7989D90D4B3E8801AB

Path : C:\Program Files\Npcap\NPFInstall.exe Status : Valid StatusMessage : Signature verified. Thumbprint : 3C0D087ECDCC76D1084ABE00F1FEE5040400AE37

Path : C:\Program Files\Npcap\Uninstall.exe Status : Valid StatusMessage : Signature verified. Thumbprint : 3C0D087ECDCC76D1084ABE00F1FEE5040400AE37

LastWriteTime : 24/06/2022 17:31:16 Length : 156152 Name : NpcapHelper.exe

LastWriteTime : 24/06/2022 17:31:14 Length : 218616 Name : Packet.dll

LastWriteTime : 24/06/2022 17:31:16 Length : 266232 Name : WlanHelper.exe

LastWriteTime : 24/06/2022 17:31:14 Length : 486904 Name : wpcap.dll

LastWriteTime : 24/06/2022 17:31:16 Length : 156152 Name : NpcapHelper.exe

LastWriteTime : 24/06/2022 17:31:14 Length : 218616 Name : Packet.dll

LastWriteTime : 24/06/2022 17:31:16 Length : 266232 Name : WlanHelper.exe

LastWriteTime : 24/06/2022 17:31:14 Length : 486904 Name : wpcap.dll

LastWriteTime : 24/06/2022 17:31:10 Length : 128504 Name : NpcapHelper.exe

LastWriteTime : 24/06/2022 17:31:08 Length : 172024 Name : Packet.dll

LastWriteTime : 24/06/2022 17:31:10 Length : 218104 Name : WlanHelper.exe

LastWriteTime : 24/06/2022 17:31:10 Length : 414712 Name : wpcap.dll

LastWriteTime : 24/06/2022 17:31:10 Length : 128504 Name : NpcapHelper.exe

LastWriteTime : 24/06/2022 17:31:08 Length : 172024 Name : Packet.dll

LastWriteTime : 24/06/2022 17:31:10 Length : 218104 Name : WlanHelper.exe

LastWriteTime : 24/06/2022 17:31:10 Length : 414712 Name : wpcap.dll

WinPcap Info:

HKLM:\SOFTWARE\WOW6432Node\WinPcap: Not present.

Registry Info:

HKLM:\SOFTWARE\WOW6432Node\Npcap:

AdminOnly : 0 WinPcapCompatible : 1 (default) : C:\Program Files\Npcap

HKLM:\SYSTEM\CurrentControlSet\Services\npcap:

Type : 1 Start : 1 ErrorControl : 1 Tag : 50 ImagePath : \SystemRoot\system32\DRIVERS\npcap.sys DisplayName : @oem30.inf,%NPF_Desc_Standard%;Npcap Packet Driver (NPCAP) Group : NDIS Description : @oem30.inf,%NPF_Desc_Standard%;Npcap Packet Driver (NPCAP) NdisMajorVersion : 6 NdisMinorVersion : 50 DriverMajorVersion : 1 DriverMinorVersion : 70

HKLM:\SYSTEM\CurrentControlSet\Services\npcap\Parameters:

LoopbackSupport : 1 DltNull : 1 Edition : Npcap AdminOnly : 0 Dot11Support : 1 NdisImPlatformBindingOptions : 0 DefaultFilterSettings : 1 VlanSupport : 0 WinPcapCompatible : 1

HKLM:\SYSTEM\CurrentControlSet\Services\npcap_wifi:

Start : 4 NdisMajorVersion : 6 NdisMinorVersion : 50 DriverMajorVersion : 1 DriverMinorVersion : 70

HKLM:\SYSTEM\CurrentControlSet\Services\npf: Not present. HKLM:\SYSTEM\CurrentControlSet\Services\npf\Parameters: Not present. HKLM:\SYSTEM\CurrentControlSet\Services\npf_wifi: Not present.

Service Info:

Status : Running Name : npcap DisplayName : Npcap Packet Driver (NPCAP)

Get-Service : Cannot find any service with service name 'npf'. At C:\Program Files\Npcap\DiagReport.ps1:214 char:1

  • Get-Service npf
  •   + CategoryInfo          : ObjectNotFound: (npf:String) [Get-Service], ServiceCommandException
  + FullyQualifiedErrorId : NoServiceFoundForGivenName,Microsoft.PowerShell.Commands.GetServiceCommand

Install Info:

Please refer to: C:\Program Files\Npcap\install.log

**I also tried to run nmap with the -e option and sleected eth1. Still no joy, lastly I installed npcap 1.70.

24allday avatar Aug 19 '22 22:08 24allday 

dnet: Failed to open device eth0
QUITTING!

Show up for me when I uninstall npcap service in WireGuard adapter. Network and Share center > change network card setting > right click on interface that you try to access network from. and in "network tab" there will be few items but non of it will be named " npcap packet driver (npcap)" if you add > pick service > nmap project > npacp packet driver.

I'm at that spot and have diffrent error (reladed with wireguard) but its very likly that this will help you.

bigretromike avatar Oct 08 '22 22:10 bigretromike

Today i catch that error too and remember that I solve it early by reinstall (update) wireshark. nmap --iflist show me correct devices but nmap failed. My notebook by default boot with disabled WLAN and need to press hotkey (via FN+Functional keys) to enable it. In my case it was: plug on notebook, boot Win7, press FN key to enable WLAN, start nmap 7.94(NPCAP 1.71) and failed nmaping. After this I go to Device manager, enable "Show hidden device" in View menu, find "Npcap Packet Driver (NPCAP)" in tree under "non-plugin device drivers" (don't know how it correctly named in Eng Win, I have localized) and restart driver, then all work.

desempare avatar Aug 02 '23 01:08 desempare