packet

deja-packet transmits raw packets through a specified interface.

Usage: ./deja-packet -pcap < libpcap capture file > < interface name >
or: ./deja-packet -raw < raw packet file > < interface name >

Note: you must be root to successfully transmit packets with deja-packet due to the Linux security restrictions with raw sockets.

In the [-p]cap mode, deja-packet transmits selected packets from a libpcap capture file (such as one created by Ethereal/Wireshark, or tcpdump). In the [-r]aw mode, deja-packet transmits the raw contents of a file as one whole packet.

The [-p]cap mode is interactive: the user will be continuously prompted to select which packet from the libpcap capture file to transmit, until the “q” character is encountered, where the program will quit.

Example pcap mode:

$ sudo ./deja-packet -p icmp_ping.pcap eth0
Select packet number (1 to 6) for transmission or q for quit: 1
Successfully transmitted packet!
Select packet number (1 to 6) for transmission or q for quit: 2
Successfully transmitted packet!
Select packet number (1 to 6) for transmission or q for quit: 5
Successfully transmitted packet!
Select packet number (1 to 6) for transmission or q for quit: 6
Successfully transmitted packet!
Select packet number (1 to 6) for transmission or q for quit: q
$

In the [-r]aw mode, deja-packet exits immediately after the attempted transmission is complete (allows deja-packet to be easily used with a script).

Example raw mode:

$ sudo ./deja-packet -r samplepacket eth0
Successfully transmitted packet!
$

icmp_ping.pcap is included as a sample libpcap capture file.

To compile deja-packet, simply use the command “make”.

deja-packet remains Linux-only because it requires PF_PACKET sockets.

This project is released under the GNU General Public License version 2.

Colasoft Packet Builder is useful tool used for creating custom network packets, you can use this tool to check your network protection against attacks and intruders. Colasoft Packet Builder provides you very powerful editing feature, besides common HEX editing raw data, it featuring a Decoding Editor which allows you edit specific protocol field value much easier. In addition to building packets, Colasoft Packet Builder also supports saving packets to packet files and sending packets to network.

Colasoft Packet Builder provides several kinds of common-used packet - ARP Packet, IP Packet, TCP Packet and UDP Packet. All packets and their decode information are editable. Users can create a most poplar packet according to the template provided by Colasoft Packet Builder conveniently.

I have noticed a pattern with my ISP - between 07h00 and 09h00 each work day, my connection dies for a few seconds. I confronted them and they blamed the telco. The telco inspected the line and found no problems. They insisted their systems were working. So, I developed a monitor to prove my claims.

After a few weeks of work on this software and a couple of days of arguing, my conclusive proof is now being taken into account as they try to diagnose the real cause.

The Packet Ninja is the result of this disagreement. I needed software to monitor my connection 24/7 and to produce results that could not be contested. I wondered how many other people had the same problem, so I developed the software into a more user-friendly commercial release - and called it the Packet Ninja!

I do of course realise that more utility is expected out of commercial software and a roadmap for the development of extra features is included below. Primarily, the Packet Sentry tests connections and monitor internet services, including HTTP, FTP and mail, and alert administrators via SMS of fallovers. I hope you find this as useful as I have.

The basic feature set that I guarantee in the full release will include several tests:
· connection monitor (based on the Ping protocol);
· a website monitor (using http to retrieve a specific file); and
· an email send/deliver set (using SMTP and POP).

The final release will also feature follow-up tools for administration:
· Save graphs and logs (to send to your ISP, for example);
· Configure actions based on rules (restart after 20 failures, for example); and
· SMS notification via a supported GSM modem.

Colasoft Packet Player is a replay tool which allows you to open captured packet trace file and playback in the network. Colasoft Packet Player supports many packet trace file formats created by many sniffer software, such as Colasoft Capsa, Ethereal, Network General Sniffer and WildPackets EtherPeek/OmniPeek etc, it also support burst mode and loop sending feature.

Network packet analyzer - packet sniffer. Packet capture output is displayed in real time. Supports TCP, UDP, ICMP protocols. Shows detailed packet header information. The TCP packet data can be viewed in text or ascii format. Global Packet Monitor is a packet sniffer, sometimes referred to as a network monitor or network analyzer. It can be used legitimately by a network or system administrator to monitor and troubleshoot network traffic. Using the information captured by the packet sniffer an administrator can identify erroneous packets and use the data to pinpoint bottlenecks and help maintain efficient network data transmission. This program is available for free to Global Up Time website monitoring service clients.

Packet Spy is a free and useful packet sniffer utility.

Packet Spy is a tool designed with the purpose of monitoring incoming and outgoing packets from a given network. It is most useful in situations where you need to verify the security of a packet or monitor the responses invoked by the network.

It features an onscreen view of sent/received packets and can also log results to a file for further examination.

Here are some key features of "Packet Spy":

· Displays incoming and outgoing packets from a given source
· Create filters to monitor for specific traffic
· Output reports to log files for further examination
· Displays IP/TCP/UDP packet header information

RADIUS::Packet is an object-oriented Perl interface to RADIUS packets.

SYNOPSIS

use RADIUS::Packet;
use RADIUS::Dictionary;

my $d = new RADIUS::Dictionary "/etc/radius/dictionary";

my $p = new RADIUS::Packet $d, $data;
$p->dump;

if ($p->attr(User-Name eq "lwall") {
my $resp = new RADIUS::Packet $d;
$resp->set_code(Access-Accept);
$resp->set_identifier($p->identifier);
$resp->set_authenticator($p->authenticator);
$resp->set_attr(Reply-Message) = "Welcome, Larry!rn";
my $respdat = auth_resp($resp->pack, "mysecret");
...

RADIUS (RFC2138) specifies a binary packet format which contains various values and attributes. RADIUS::Packet provides an interface to turn RADIUS packets into Perl data structures and vice-versa.

RADIUS::Packet does not provide functions for obtaining RADIUS packets from the network. A simple network RADIUS server is provided as an example at the end of this document. Also, a RADIUS::Server module is under development which will simplify the interface.

Packet Excalibur description
A multi-platform graphical and scriptable network packet engine with extensible text based protocol descriptions In short Packet Excalibur is a network tool to built and receive custom packets.

With Packet Excalibur you will be able :
· to decide packet attributes from physical layer to the top,
· to sniff and spoof packets (packet generator) in a single interface,
· to build scripts in the gui,
· to define additional protocols in simple text files.

What is it useful for:
· Pen testing firewalls, routers, or any network enable equipment.
· Validating your custom created protocols without the burden of writting lines of code.
· Teaching yourself how protocols works and articulates around each other.

Net::DHCP::Packet is a Perl module with object methods to create a DHCP packet.

SYNOPSIS

use Net::DHCP::Packet;

my $p = new Net::DHCP::Packet->new(
Chaddr => 000BCDEF,
Xid => 0x9F0FD,
Ciaddr => 0.0.0.0,
Siaddr => 0.0.0.0,
Hops => 0);

Represents a DHCP packet as specified in RFC 1533, RFC 2132.

CONSTRUCTOR

This module only provides basic constructor. For "easy" constructors, you can use the Net::DHCP::Session module.

new( )

new( BUFFER )

new( ARG => VALUE, ARG => VALUE... )

Creates an Net::DHCP::Packet object, which can be used to send or receive DHCP network packets. BOOTP is not supported.

Without argument, a default empty packet is created.

$packet = Net::DHCP::Packet();

A BUFFER argument is interpreted as a binary buffer like one provided by the socket recv() function. if the packet is malformed, a fatal error is issued.

use IO::Socket::INET;
use Net::DHCP::Packet;

$sock = IO::Socket::INET->new(LocalPort => 67, Proto => "udp", Broadcast => 1)
or die "socket: $@";

while ($sock->recv($newmsg, 1024)) {
$packet = Net::DHCP::Packet->new($newmsg);
print $packet->toString();
}

To create a fresh new packet new() takes arguments as a key-value pairs :

ARGUMENT FIELD OCTETS DESCRIPTION
-------- ----- ------ -----------

Op op 1 Message op code / message type.
1 = BOOTREQUEST, 2 = BOOTREPLY
Htype htype 1 Hardware address type, see ARP section in "Assigned
Numbers" RFC; e.g., 1 = 10mb ethernet.
Hlen hlen 1 Hardware address length (e.g. 6 for 10mb
ethernet).
Hops hops 1 Client sets to zero, optionally used by relay agents
when booting via a relay agent.
Xid xid 4 Transaction ID, a random number chosen by the
client, used by the client and server to associate
messages and responses between a client and a
server.
Secs secs 2 Filled in by client, seconds elapsed since client
began address acquisition or renewal process.
Flags flags 2 Flags (see figure 2).
Ciaddr ciaddr 4 Client IP address; only filled in if client is in
BOUND, RENEW or REBINDING state and can respond
to ARP requests.
Yiaddr yiaddr 4 your (client) IP address.
Siaddr siaddr 4 IP address of next server to use in bootstrap;
returned in DHCPOFFER, DHCPACK by server.
Giaddr giaddr 4 Relay agent IP address, used in booting via a
relay agent.
Chaddr chaddr 16 Client hardware address.
Sname sname 64 Optional server host name, null terminated string.
File file 128 Boot file name, null terminated string; "generic"
name or null in DHCPDISCOVER, fully qualified
directory-path name in DHCPOFFER.
IsDhcp isDhcp 4 Controls whether the packet is BOOTP or DHCP.
DHCP conatains the "magic cookie" of 4 bytes.
0x63 0x82 0x53 0x63.
DHO_*code Optional parameters field. See the options
documents for a list of defined options.
See Net::DHCP::Constants.
Padding padding * Optional padding at the end of the packet

See below methods for values and syntax descrption.

Note: DHCP options are created in the same order as key-value pairs.

Packet Sender description
Connects to a port through winsock protocol and then sends text strings. Packet Sender is a small and simple application that connects to a port through winsock protocol and then sends text strings.

Installation:
· Run Packet Sender.exe.
· Enter the server ip and port, hit connect and wait a second until connected.
· Enter the Query or packet you want to send, and press go.

EtherDetect Packet Sniffer is an easy for use and award-winning packet sniffer and network protocol analyzer, which provides a connection-oriented view for analyzing packets more effectively.

With the handy tool, all you have to do is to set up the filter, start capturing and view connections, packets as well as data on the fly.

EtherDetect Packet Sniffer is a helpful tool for company manager, web page designers, concerned parents, LAN administrators, security professionals, C++/Java/ASP/JSP/PHP/SOAP programmers, or anyone who are interested in network traffic going through his PC or the whole LAN. Reasons to use EtherDetect are numerous.

Here are some key features of "EtherDetect Packet Sniffer":

· Organize captured packets in a connection-oriented view
· Capture IP packets on your LAN with nearly no packets losing.
· Smart real-time analyzer enables on-the-fly content viewing while capturing and analyzing.
· Parse and decode a variety of network protocol.
· Support saving captured packets for reopening afterward.
· Powerful filter provides a flexible mechanism to capture specific packets.
· Syntax highlighting for application data in the format of HTML, HTTP and XML.

EtherDetect Packet Sniffer is an easy to use and award-winning packet sniffer and network protocol analyzer, which provides a connection-oriented view for more effectively packets analyzing. With the handy tool, all you need to do is to set up the filter, start capturing, and view connections, packets as well as data on the fly.

Key Features:
Organize captured packets in a connection-oriented view
Capture IP packets on your LAN with nearly no packets losing.
Smart real-time analyzer enables on-the-fly content viewing while capturing and analyzing.
Parse and decode an variety of network protocol.
Support saving captured packets for reopening afterward.
Powerful filter provides a flexible mechanism to capture specific packets.
Syntax highlighting for application data in the format of HTML, HTTP and XML.

EtherDetect Packet Sniffer is a helpful tool for company managers, web page designers, concerned parents, LAN administrators, security professionals, C++/Java/ASP/JSP/PHP/SOAP programmers, or anyone who are interested in network traffic going through his PC or the whole LAN. Reasons to use EtherDetect are numerous.

EtherDetect Packet Sniffer is an easy to use and award-winning packet sniffer and network protocol analyzer, which provides a connection-oriented view for more effectively packets analyzing. With the handy tool, all you need to do is to set up the filter, start capturing, and view connections, packets as well as data on the fly.

Key Features:
Organize captured packets in a connection-oriented view
Capture IP packets on your LAN with nearly no packets losing.
Smart real-time analyzer enables on-the-fly content viewing while capturing and analyzing.
Parse and decode an variety of network protocol.
Support saving captured packets for reopening afterward.
Powerful filter provides a flexible mechanism to capture specific packets.
Syntax highlighting for application data in the format of HTML, HTTP and XML.

EtherDetect Packet Sniffer is a helpful tool for company managers, web page designers, concerned parents, LAN administrators, security professionals, C++/Java/ASP/JSP/PHP/SOAP programmers, or anyone who are interested in network traffic going through his PC or the whole LAN. Reasons to use EtherDetect are numerous.

Packet Excalibur is a multi-platform graphical and scriptable network packet engine with extensible text-based protocol descriptions. It is a network tool designed to build and receive custom packets from network.

Pen testing firewalls, routers, or any network enable equipment. Validating your custom built protocols without the burden of writting lines of code. Teaching yourself how protocols works and articulates around each other.

Download the install package (PacketExcalibur_*.*_linux_tgz)

Unzip and untar the archive, run "make" in the "PacketExcalibur_*/main" directory,
- binaries are installed in /usr/sbin
- support packages are installed in /var/cache/excalibur
- preference file is created in the user home directory

Packet Garden is a project that allows you to grow a world from network traffic.

Packet Garden captures information about how you use the internet and uses this stored information to grow a private world you can later explore.

To do this, Packet Garden takes note of all the servers you visit, their geographical location and the kinds of data you access.

Uploads make hills and downloads valleys, their location determined by numbers taken from internet address itself.

The size of each hill or valley is based on how much data is sent or received.

Plants are also grown for each protocol detected by the software; if you visit a website, an HTTP plant is grown. If you share some files via eMule, a Peer to Peer plant is grown, and so on.

Packet Debugger presents a debugger-like UI for pcap packet capture files.

The Packet Debugger (pdb) allows users to work with packet streams as if they were working with a source code debugger.

Users can list, inspect, modify, and retransmit any packet from captured files, as well as work with live packet captures.

Packet Garden application captures information about how you use the internet and uses this stored information to grow a private world you can later explore.

To do this, Packet Garden takes note of all the servers you visit, their geographical location and the kinds of data you access. Uploads make hills and downloads valleys, their location determined by numbers taken from internet address itself.

The size of each hill or valley is based on how much data is sent or received. Plants are also grown for each protocol detected by the software; if you visit a website, an HTTP plant is grown. If you share some files via eMule, a Peer to Peer plant is grown, and so on.

None of this information is made public or shared in any way, instead its used to grow a personal landscape, a kind of walk-in graph uniquely shaped by the way you use the internet.

With each day of network activity a new world can be generated, each of which are stored as tiny files for you to browse, compare and visit as time goes by. You can think of packet gardens as pages from a network diary.