Re: Re: scapy-win: registry issue with 1.2.0.2-win

Amol Jadhav wrote:
>> It looks as if dnet interface eth6 is the correct one to use and it 
>> should have been mapped to pcap interface eth0. 
> Yes it is.
 > Welcome to Scapy (1.2.0.2-win)
 > >>> conf.iface
 >'eth6'
 > >> >>> pcap_name(conf.iface)
 >'eth0'

That looks correct. So it doesn't seem to be the pcap/dnet interface 
mapping problem we both originally suspected.

> Sniffing works fine, doesn't it?
> No it doesn't. :(

Well, then let's focus on that first. On what version of Windows are you 
working. I have tested Scapy-win only on XP and not on Vista.

I remember someone reporting problems on Vista to me. He got a runtime 
error in ntdll.dll everytime he tried to sniff or send a packet. Is it 
that what you see?

> Is MAC address is the cause of this problem?

No, I don't think so.

>> Try setting "conf.iface='eth6'" and send some packets. Does sending 
>> packets work now?
> :( No it still makes Scapy to go away.

What exactly happens if you try the following?

 >>> sniff(count=5)

Or just start a plain Python session and do this:

 >>> import pcap
 >>> pc = pcap.pcap()   # or   pcap.pcap("eth0")
 >>> for ts, pkt in pc:
...     print repr(pkt)

> I'm very much new to Scapy and concepts around it, could you please also 
> send me some references (links, books, etc) to quickly get on to it?

http://dirk-loss.de/scapy-doc/
http://dirk-loss.de/scapy-doc/Scapy.pdf
http://www.secdev.org/conf/scapy_pacsec05.pdf

But keep in mind that the Windows port is still at v1.2.0.2, so where 
the new v2 docs say "from scapy.all import *", just do a "from scapy 
import *".

Regards
Dirk

---------------------------------------------------------------------
To unsubscribe, send a mail to scapy.ml-unsubscribe <at> secdev.org