search

nmap / npcap

Nmap Project's Windows packet capture and transmission library
https://npcap.com
Other
2.99k stars 516 forks source link

Nmap Error: 'Error compiling our pcap filter: expression rejects all packets' #739

Open Msilawedada opened 3 months ago

Msilawedada commented 3 months ago

Im having an issue when I use the metasploit through Nord VPN. I'm getting the following error

[*] [2024.07.01-10:43:00] Nmap Output: Starting Nmap 7.91 ( https://nmap.org ) at 2024-07-01 10:43 South Africa Standard Time *[] [2024.07.01-10:43:00] Nmap Error: 'Error compiling our pcap filter: expression rejects all packets'* [] [2024.07.01-10:43:00] Nmap Results: Importing scan data. [+] [2024.07.01-10:43:01] Workspace:TEST03 Beginning step 3/176 Sweeping 1XX.1XX.1XX.1XX with UDP probes - Progress: 1% [] [2024.07.01-10:43:01] Sending 13 probes to 1XX.1XX.1XX.1XX->1XX.1XX.1XX.1XX (1 hosts) [] [2024.07.01-10:43:02] Discovered DNS on 1XX.1XX.1XX.1XX:53 (8f38838000010000000000000756455253494f4e0442494e440000100003) [+] [2024.07.01-10:43:16] Workspace:TEST03 Beginning step 63/176 Sweeping 1XX.1XX.1XX.1XX with VxWorks probes - Progress: 35% [+] [2024.07.01-10:43:27] Workspace:TEST03 Beginning step 172/176 Normalizing system information - Progress: 97% [] [2024.07.01-10:43:27] Beginning step 1/2 Normalizing 1XX.1XX.1XX.1XX - Progress: 0% [] [2024.07.01-10:43:27] Beginning step 2/2 Normalization complete - Progress: 50% [+] [2024.07.01-10:43:27] Workspace:TEST03 Beginning step 173/176 Identifying unknown services - Progress: 97% [+] [2024.07.01-10:43:27] Workspace:TEST03 Beginning step 174/176 Normalizing system information for newly identified services - Progress: 98% [] [2024.07.01-10:43:27] Beginning step 1/2 Normalizing 1XX.1XX.1XX.1XX - Progress: 0% [] [2024.07.01-10:43:27] Beginning step 2/2 Normalization complete - Progress: 50% [+] [2024.07.01-10:43:27] Workspace:TEST03 Beginning step 175/176 Sweeping newly found services - Progress: 98% [+] [2024.07.01-10:43:27] Workspace:TEST03 Beginning step 176/176 Normalizing system information for newly identified services - Progress: 99% [] [2024.07.01-10:43:27] Beginning step 1/2 Normalizing 1XX.1XX.1XX.1XX - Progress: 0% [] [2024.07.01-10:43:27] Beginning step 2/2 Normalization complete - Progress: 50% [] [2024.07.01-10:43:27] Sweep of 1XX.1XX.1XX.1XX-1XX.1XX.1XX.1XX complete (0 new hosts, 0 new services) [] [2024.07.01-10:43:27] Scanned 1 of 1 hosts (100% complete) [+] [2024.07.01-10:43:27] Workspace:TEST03 Task Completed - Progress: 100%

However when I change the connection to use my WIFI things seem to be fine.

guyharris commented 3 months ago

Error compiling our pcap filter: expression rejects all packets

Perhaps your pcap filter cannot possibly match any packets on the interface on which you're capturing.

On what type of interface are you capturing, and what is your filter?

Msilawedada commented 3 months ago

Nmap pcap "NPCAP" v1.79 and on NordLynx adaptor for Nord VPN.

guyharris commented 3 months ago

Nmap pcap "NPCAP" v1.79 and on NordLynx adaptor for Nord VPN.

What is the filter expression you're using?

Msilawedada commented 3 months ago

The nmap in this case is invoked by Metasploit and I hit that error only when I'm connected to my VPN. Npcap is added as a driver to NordLynx adaptor.

guyharris commented 3 months ago

The nmap in this case is invoked by Metasploit

What is the filter that NordLynx is using?

Msilawedada commented 3 months ago

NordLynx is tunneling traffic and not sure how to check filtering on it. I tried with Proxy Switcher and the connection worked.