IP Sniffer 1.98

IP Sniffer 1.98 is a helpful set of tools which is built around a packet sniffer. The packet sniffer can work on all Windows versions using either: the new raw socket implementation of Windows2000 (driverless), WinPcap (needs to be installed), a NDIS protocol (needs to be installed , no reboot). IP sniffer is a protocol analyzer, that will use the XP/2K Raw Socket features.

IP Sniffer is also a suite of IP Tools like: IP trafic monitor, IP statistics, ARP (list & deleter entries, send request), Netbios Names, Route Print, Netstat (shows process attached to a connection, kill attached process, kill tcp entry), Network informations (Params, Adapters, Cards), Spoofing (TCP, UDP, ICMP, ARP), WINS Query, DNS Query (using win32 DNSAPI), DHCP Find, WHOIS, Resolve IP/Hostname, PING (Host & Subnet), TCP Scan (Host & Subnet).

The sniffer has basic features like filter, decode, replay, parse…

Enhancements:

• Added : loadfromdb and saveTodb will keep table hisTory
• Added : save cap file with same link type as loaded cap file
• Added : find user / computer in ad browser
• Added : lastlogontimestamp in ad browser
• Added : update/add/delete db one item in bookmark
• Added : add/delete/create group & user in ad browser
• Added : winsock hook will display 127.0.0.1 traffic
• Added : winsock hook can save datas To cap file
• Added : more reports : devices, printers ports/drivers/moniTors, local admins
• Added : reports from a list of servers
• Added : update line from vbs in bookmark window
• Added : new unit = hashes
• Added : SIO_RCVALL IOCTL option (To be tested against different nics)
• Added : modified savetreeview To be able To reload via loadlistview
• Added : remove column, search and replace in bookmark
• fixed : winsock hook (recv functions were nulling the buffer)
• Todo : switch To virtual view?
• Todo : add mssql processes,ts services, dhcp bails To host report?
• Todo : winspool helper with ureport unit
• Todo : sid To account
• Todo : snmp reports for windows hosts?