SmartSniff 1.45

SmartSniff 1.45 is a useful tool which is designed to provide help with capturing TCP/IP packets and viewing the captured data. using this version of  SmartSniff will surely bring you pleasure and convenience as well.

SmartSniff allows you to capture TCP/IP packets that pass through your network adapter, and view the captured data as sequence of conversations between clients and servers. You can view the TCP/IP conversations in Ascii mode (for text-based protocols, like HTTP, SMTP, POP3 and FTP.) or as hex dump. (for non-text base protocols, like DNS)

SmartSniff provides 2 methods for capturing TCP/IP packets :

• Raw Sockets (Only for Windows 2000/XP or greater): Allows you to capture TCP/IP packets on your network without installing a capture driver. This method has some limitations and problems.
• WinPcap Capture Driver: Allows you to capture TCP/IP packets on all Windows operating systems. (Windows 98/ME/NT/2000/XP/2003) In order to use it, you have to download and install WinPcap Capture Driver from this Web site. (WinPcap is a free open-source capture driver.)
  

This method is generally the preferred way to capture TCP/IP packets with SmartSniff, and it works better than the Raw Sockets method.

Major Features:

1. Display Mode: SmartSniff provides 3 basic modes to display the captured data: Automatic, Ascii, and Hex Dump. On Automatic mode (the default), SmartSniff checks the first bytes of the data stream - If it contains characters lower than 0x20 (excluding CR, LF and tab characters), it displays the data in Hex mode. otherwise, it displays it in Ascii mode.
   
2. Exporting the captured data: SmartSniff allows you to easily export the captured data for using it in other applications
   
3. Displaying characters above ASCII 127: By default, characters above ASCII 127 are not displayed in the TCP/IP streams. You can enable high ASCII characters by using "Display Characters Above ASCII 127". When you use this option, the TCP/IP streams are displayed without colors. Be aware that when working in this mode, the loading process of the lower pane might be very slow.
   
4. The 'IP Country' columns: In order to watch the countries of the local/remote IP addresses, you have to download the latest IP To Country file from here. You have the put the 'IpToCountry.csv' file in the same folder of smsniff.exe
   
5. Capture and Display Filters: you can filter unwanted TCP/IP activity during the capture process (Capture Filter), or when displaying the captured TCP/IP data (Display Filter).
   
6. Live Mode
   
7. Viewing process information
   
   • Process information is only displayed for TCP packets (It doesn't work with UDP)
   • Process information may not be displayed for TCP connections that closed after short period of time.
   • Retrieving process information consume more CPU resources and may slow down your computer. It's not recommended to use this feature if you have intensive network traffic.
   • Process information is currently not saved in ssp file.
8. Translating to other languages: SmartSniff allows you to easily translate all dialog-boxes, menus, and strings to other language.

Enhancements: Display Outgoing/Incoming Data - When this option is turned on, separated values for outgoing and incoming packets are displayed for the following columns: 'Packets', 'Data Size', and 'Total Size'. The values are displayed in the following format: {Outgoing ; Incoming}

Requirements: 

1. Outgoing UDP and ICMP packets are not captured.
2. On Windows XP SP1 outgoing packets are not captured at all.This bug was fixed on SP2 update, but under Vista, Microsoft returned back the outgoing packets bug of XP/SP1.
3. On Windows Vista with SP1, only UDP packets are captured. TCP packets are not captured at all.
   

WareSeeker Editor