Community
User Guides
Support
Community
Help Forums
English Forum
General
About our Community
General Discussion
News and Feedback
Products
F-Secure SAFE
F-Secure FREEDOME
F-Secure KEY
F-Secure SENSE Router
F-Secure ID PROTECTION
Other products
Beta programs
Feature Requests
Finnish Forum (Tukifoorumi)
Tuotteet Kotiin
F-Secure SAFE
F-Secure FREEDOME
F-Secure KEY
F-Secure SENSE Router
F-Secure ID PROTECTION
Muut tietoturvatuotteet
Support Articles
Language
English
Suomi
Deutsch
Français
日本語
Svenska
Dansk
Italiano
Nederlands
Norsk
Polski
中文 (繁體)
Products & Services
F-Secure TOTAL
F-Secure SAFE / Internet Security / Anti-Virus
F-Secure FREEDOME
F-Secure KEY
F-Secure SENSE Router
F-Secure ID PROTECTION
Other products
Common topics
User Guides
Support
Login
|
Register
F-Secure Radar scans terminate with the error message "Failed to open device eth1 (or eth0)" in the Radar portal - F-Secure Community
<main> <article class="userContent"> <h3 data-version="6" data-article="000010999" data-id="issue">Issue:</h3> <p>I notice all the Radar scans terminated. When investigating the issue in Radar portal scan log, scans ended with the following error message:<br> <br></p><pre class="code codeBlock" spellcheck="false" tabindex="0"><br>2020-03-23 07:21:46Z|DEBUG|FSecure.Radar.Scanners.PortScan.PUN.NmapIntegration.Wrapper|Nmap commandline: <a rel="nofollow" href="file:///C:/Program">C:\Program</a> Files (x86)\F-Secure\RadarScanAgent\ssscans\37df885a-1100-42c4-a31e-e4b7957f2df7\yfwiw\2020_03_23\07_21_36\psng\nmap\nmap.exe --stats-every=60s -v -d --defeat-icmp-ratelimit --defeat-rst-ratelimit --min-rate 125 --max-rtt-timeout 600ms --initial-rtt-timeout 500ms --max-scan-delay 10ms --max-retries 1 --min-hostgroup 16 --version-intensity 0 -p T:0-65535,U:0-1024 -sS -sU -O -Pn -oX 608.nmap.xml -T 3 192.168.1.10<br>2020-03-23 07:21:47Z|ERROR|FSecure.Radar.Scanners.PortScan.PUN.NmapIntegration.NmapRunner|dnet: <b>Failed to open device eth1</b><br>2020-03-23 07:21:47Z|DEBUG|FSecure.Radar.Scanners.PortScan.PUN.NmapIntegration.NmapRunner|wpcap.dll present, library version: Npcap version 0.9986, based on libpcap version 1.9.1<br>2020-03-23 07:21:47Z|ERROR|FSecure.Radar.Scanners.PortScan.PUN.NmapIntegration.NmapRunner|QUITTING!</pre> The issue started after the scan node was automatically upgraded. <h3 data-id="resolution">Resolution:</h3> <p></p><ol><li>Make sure there is nothing that could block the scanner application (like an antivirus or firewall) by excluding the Radar Scan node agent folder C:\Program Files (x86)\F-Secure\RadarScanAgent from real-time scanning. Consult the anti-virus documentation on how to accomplish this task.</li><li>Check if the user account configured to run the Scan Node Agent service (="f-secure radar scan node agent") still has local administrator rights.</li></ol><p>If the issue persists, apply the following fix:</p> <ol><li>Stop the radar scan node service by typing the following in elevated command prompt:</li></ol><ul><li>net stop "f-secure radar scan node agent"</li></ul><ol start="2"><li>Uninstall <b>WinPcap 4.1.3</b> using the Control Panel applet "Uninstall or change a program" (note: if WinPcap is not listed as installed, proceed to the next step).</li><li>Uninstall <b>Npcap OEM </b>using the Control Panel applet "Uninstall or change a program"</li><li>Restart the server</li><li>Reinstall <b>Npcap OEM </b></li></ol><div><b>Note: </b>We can reinstall Npcap using the Scan node agent installer, but in this case, the recommendation is to install <b>Npcap </b>manually. Download the latest version of "Npcap installer for Windows" <a rel="nofollow" href="https://nmap.org/npcap/">here</a>. During installation, make sure to <b>deselect t</b>he option "Install Npcap in WinPcap API-compatible mode" as visible in the attached screenshot.<br><br><img alt="User-added image" height="394" src="https://us.v-cdn.net/6032052/uploads/3JS5F7SMK2CA/kcs-0em0x000002us72.png" width="500" class="embedImage-img importedEmbed-img"></img></div> <ol start="6"><li>Start the scan node service by typing the following in elevated command prompt:</li></ol><ul><li>net start "f-secure radar scan node agent"</li></ul> The scanning node should start and complete now. If this is not the case, proceed to contact <a rel="nofollow" href="https://www.f-secure.com/en/business/support-and-downloads/support-request">F-Secure Support</a>. <p>Article no: 000010999</p> </article> </main>