Arp cache issue with NMAP After Sp2

I haven't tried this yet and don't know if I will unless I have a problem. Thought it would be of interest.



Arp cache issue with NMAP
Was talking with Fyodor yesterday and he brought to my attention the fact that in SP2, Microsoft also added some new anti-arp-spoofing code which, on top of the raw sockets, prevents nmap from working correctly.

This means that unless your target is in your arp cache, nmap will not find the host.

Well, that is, until I added arp support into the patch.

You can read more about it from Fyodor in the post he made today over on nmap-dev.

If you want to grab the new patch (yes thats 3 revisions in less that 24 hours), you can grab it here. If you don't want to build it yourself, Fyodor has merged my changes into nmap and you can download it here.

http://silverstr.ufies.org/blog/archives/000669.html

 

Will it make the patched system vulnerable to ARP cache spoofing again?