Can't arp poison / nmap scan (Edimax) ~!

[0x536e5a]

Hello,

I have runned from ideas. When I try to scan machine that use Edimax usb wlan card I get:

Starting Nmap 5.35DC1 ( http://nmap.org ) at 2011-01-31 20:08 CET
Nmap scan report for 192.168.3.2
Host is up (0.0017s latency).
All 1000 scanned ports on 192.168.3.2 are filtered
MAC Address: 00:1F:1F:69:X:X (Edimax Technology Co.)
Nmap done: 1 IP address (1 host up) scanned in 21.68 seconds

I can't arp poison/spoof using linux / windows. When I'm trying I don't see any packets!. I didn't forget about:
echo 1 > /proc/sys/net/ipv4/ip_forward

and other commands.


When I'm trying to poison 'victim' is 'getting disconnected', nothing more.


Please tell me what I do wrong. All the techniques works fine against other machines.


Thanks in advance

//Victim is my 2nd notebook (was VM, now local WinXP installed) + firewall

[thorin]

First what did you expect to see from the machine in the nmap results?

Second, you should read up on arp spoofing as the issue you're experiencing is not surprising.

[gunrunr]

read up on other scans and scripts on nmap, if you have time to run the udp scans as well and scan all ports instead of just the top 1000. Also can you provide more info about the victim? it shouldn't really matter that its edimax. um you do own the victim right?

[0x536e5a]

Of course!

Victim was VM, now is firewalled (system firewall) Windows XP (also tryed Win7). The problem is last time all was working, when I was using on victim normal wlan adapter, when changed to Edimax usb wlan, all gone wrong.

Tell me what I'm doing wrong, thanks.