Free sniff software for windows

A tiny program that will report your machines true IP address and network name. Also allows you to copy the IP address to the clipboard for use in other applications.

daSniff is an open source customizable sniffer for win32 systems daSniff is an open source customizable sniffer for win32 systems. daSniff helps you to log your LAN traffic by specifying packet rules as filters. daSniff has two major versions named version A and version B. Both versions use the same packet filtering, but different sniffing code.
NOTE: Version A uses pure WinSock2 API and runs only under Windows 2000 and above with administrator privileges. It is also available as a Windows NT service. Version B uses WinPcap as a packet capture library and runs under Windows 95/98/ME/2000/XP.

What this is useful for if you are trying to debug some specific network behavior. I have personally spent hours running a system that was having mysterious network issues through its paces, keeping a journal entry of timestamps and actions-performed-by-user in order to correlate the two later.

Later, when correlating the two, you find out that your timestamps dont quite match, so it becomes difficult to isolate border-case traffic. The ideal dummy host for you to aim this utility at would be a living ip address on your current subnet. This will do two things. One, it being on your subnet will make sure that you arent routing wonky discard packets to other parts of the network and generally pissing people off.

Two, it being alive will make sure that windows sends the packet out... Believe that if it is a locally routable address and there is no arp entry for that IP address, the message will never be sent out or seen in the sniff.

SMSAuthenticator 1.0b comes as a proper open source authentication module for situations where 'username and password'-login provide insufficient security. The additional security is achieved by sending keys (single-use passwords) by SMS to the user's mobile phone.

Major Features:

1. Solves some of the main problems with ordinary passwords (for instance password guessing and password sniffing) without requiring special hardware on the user's side.
2. Being SOAP-based, the SMSAuthenticator may be easily integrated into existing environments, requiring only a SOAP client library in the consumer application.

Requirements:

• Windows NT/2000/XP
• Java Runtime Environment 1.2
• JDBC database

WareSeeker Editor

Netwag will give you access to 222 network tools Netwag is a graphical front end for netwox which contains 222 tools.
Main features:
- Display network configuration
- Display debugging information
- Display information about an IP address or a hostname
- Display information about an Ethernet address
- Obtain Ethernet addresses of computers in an IP list
- Display how to reach an IP address
- Sniff
- Sniff and display open ports
- Sniff and display Ethernet addresses
- Sniff and display network statistics
- Sniff and verify checksums
- Display which values to use for netwox parameters
- Obtain DLT type for sniff and spoof for each device
- Spoof a record
- Display content of a record
- Convert a record
- Recompute checksums of packets in a record
- Reassemble IP packets of a record, and reorder TCP flow
- Extract a range of packets from a record
- Search for strings in packets from a record
- Convert a number
- Convert a string
- Display ASCII table
- Convert IP addresses ranges
- Test if a directory is secure
- Dump a file
- Compute MD of a file
- Convert a binary file to readable and editable file
- Convert a readable and editable file to a binary file
- Convert a file from unix to dos
- Convert a file from dos to unix
- Spoof Ethernet packet
- Spoof EthernetArp packet
- Spoof EthernetIp packet
- Spoof EthernetIpUdp packet
- Spoof EthernetIpTcp packet
- Spoof EthernetIpIcmp packet
- Spoof Ip packet
- Spoof IpUdp packet
- Spoof IpTcp packet
- Spoof IpIcmp packet
- Spoof of packet samples : fragment
- Spoof of packet samples : fragment, ipopt:noop
- Spoof of packet samples : fragment, ipopt:rr
- Spoof of packet samples : fragment, ipopt:lsrr
- Spoof of packet samples : fragment, ipopt:ts
- Spoof of packet samples : fragment, ipopt:ipts
- Spoof of packet samples : fragment, ipopt:ippts
- Ping ICMP
- Ping ICMP (EthIP spoof)
- Ping TCP
- Ping TCP (EthIp spoof)
- Ping UDP
- Ping UDP (EthIp spoof)
- Ping ARP
- Ping ARP (EthIp spoof)
- Traceroute ICMP
- Traceroute ICMP (EthIP spoof)
- Traceroute TCP
- Traceroute TCP (EthIp spoof)
- Traceroute UDP
- Traceroute UDP (EthIp spoof)
- Traceroute on a specified IP protocol
- Traceroute on a specified IP protocol (EthIp spoof)
- Scan ICMP
- Scan ICMP (EthIP spoof)
- Scan TCP
- Scan TCP (EthIp spoof)
- Scan UDP
- Scan UDP (EthIp spoof)
- Scan ARP
- Scan ARP (EthIp spoof)
- Simulate presence of a/several computer/s (arp and ping)
- Flood a host with random fragments
- Fill table of a switch using a flood of Ethernet packets
- Synflood
- Check if seqnum are predictible
- Reset every TCP packet
- Acknowledge every TCP SYN
- Periodically send ARP replies
- Send an ICMP timestamp
- Sniff and send ICMP/ICMP destination unreachable
- Sniff and send ICMP/ICMP time exceeded
- Sniff and send ICMP/ICMP parameter problem
- Sniff and send ICMP source quench
- Sniff and send ICMP/ICMP redirect
- TCP client
- UDP client
- TCP server
- UDP server
- TCP server multiclients
- UDP server multiclients
- TCP remote administration server
- TCP remote administration client (exec)
- TCP remote administration client (get file)
- TCP remote administration client (put file)
- SYSLOG client
- Flood a host with syslog messages
- TELNET client
- TELNET client executing one or several commands
- Brute force telnet client
- Query a DNS server
- Obtain version of a Bind DNS server
- DNS server always answering same values
- Sniff and send DNS answers
- Send an email
- Post a newsgroup message
- List newsgroups available on a server
- Download one, or more, newsgroup messages
- Ethernet bridge limiting flow
- FTP listing a directory
- FTP client : get a file
- FTP client : put a file
- FTP client : del a file
- FTP client : get a directory recursively
- FTP client : put a directory recursively
- FTP client : del a directory recursively
- HTTP GET
- HTTP HEAD
- HTTP POST
- HTTP PUT
- HTTP DELETE
- HTTP TRACE
- HTTP OPTIONS
- HTTP server
- HTTP remote administration server
- Cypher/decypher a file using a xor
- Split a file in smaller chunks
- Reassemble chunks of a file
- Brute force ftp client
- Brute force http client (site password)
- Brute force http client (proxy password)
- Convert an url/uri
- Obtain urls/uris in a HMTL file
- Convert urls/uris in a HMTL file to absolute urls
- Web download (http://... or ftp://...)
- Create a sample configuration file for tool
- Web spider (use configuration file created by tool )
- Web spider on command line (fully recursive)
- Spoof EthernetIp packet
- Spoof EthernetIpUdp packet
- Spoof EthernetIpTcp packet
- Spoof EthernetIpIcmp packet
- Spoof Ip packet
- Spoof IpUdp packet
- Spoof IpTcp packet
- Spoof IpIcmp packet
- Ping ICMP Neighbor Discovery
- Ping ICMP Neighbor Discovery (EthIp spoof)
- Scan ICMP Neighbor Discovery
- Scan ICMP Neighbor Discovery (EthIp spoof)
- Interactive IRC client
- IRC client listing channels
- IRC client listening on a channel
- Network performance measurement : TCP server
- Network performance measurement : TCP client
- Network performance measurement : UDP server
- Network performance measurement : UDP client
- SNMP Get
- SNMP Walk
- SNMP Trap
- SNMP Trap
- SNMP Inform
- SNMP Set
- TFTP client : get a file
- TFTP client : put a file
- TFTP server
- FTP server
- Display simple network configuration easy to parse
- TELNET server
- DHCP client
- List articles range of a newsgroup
- Download overview of one, or more, newsgroup messages
- FTP client : get a file and check its MD
- Web download (ftp://... or http://) and check its MD
- TFTP client : get a file and check its MD
- Check if a SMTP server is up
- Check if an IRC server is up
- DHCP client requesting an INFORM
- SNTP client obtaining time
- SNTP server
- Obtain size of a web file (ftp://... or http://)
- TCP relay
- UDP relay
- TCP multiclient relay
- Millisecond sleep
- Display date and time
- SYSLOG server
- SMTP server
- Make coffee
- Generate a password (English, French, Spanish)
- Spoof of packet samples : fragment, ipopt:ssrr
- IDENT client requesting info about an open session
- IDENT client creating a session and requesting its info
- IDENT server
- WHOIS client
- WHOIS client guessing server
- SMB/CIFS client: list shares
- SMB/CIFS client: create a directory
- SMB/CIFS client: delete a directory
- SMB/CIFS client: rename a directory
- SMB/CIFS client: list contents of a directory
- SMB/CIFS client: delete a file
- SMB/CIFS client: rename a file
- SMB/CIFS client: get a file
- SMB/CIFS client: put a file
- SMB/CIFS client: recursively get a directory
- SMB/CIFS client: recursively put a directory
- SMB/CIFS client: recursively delete a directory
- Web spider on command line (stay in same directory)
- Web spider : converts a local downloaded filename to its original url
- Web spider : converts an url to its local downloaded filename
- Display a list of IP addresses
- Traceroute discovery: graph of network topology
- Traceroute discovery (EthIp spoof)
- Beep
- SMB/CIFS server
- Netwox internal validation suite
- Compute cryptographic hash of a file (md, sha, etc.)
- Convert a binary file to a base encoded file
- Convert a base encoded file to a binary file
- In a HMTL file, suppress links pointing to local urls
System requirements:
- Tcl/Tk >= 8.0

myNetMon, Network Monitor and Packet Analyzing Tool (V.2.0)
myNetMon is windows based network monitor and packet analyzing (sniffer) tool.myNetMon uses WinPcap, a windows port of Libpcap which is a packet capturing library.
Features:
- Physicial (Ethernet),
- ARP, RARP, IPX, IPV4-6,
- Displaying ICMP, UDP, TCP ... packets according to their features,
- Displaying packets in hexadecimal form,
- Listing packets accoring to their types, protocols, MAC Addresses, IP Addresses and Ports,
- Capturing only required packets (Layer 2/3, Protocol (ARP, TCP-UDP-ICMP...), port based (TCP: 23, 25, 80 ..., UDP: 53, 139 ...), Host to host, Client to host...,packets length, All these filterings can be created with BPF (Berkeley Packet Filtering) rules,
- Changing the content of packets (Packet Forging) and sending to the network,
- Reconstruction of TCP packets (So web traffic is saved as Html, Gif, Css, Zip, Mp3..., e-mail traffic saved as .eml, news traffic saved as .nws and FTP Data sessions can be saved)
- Saving captured packets,
- Opening and analyzing files, saved with Libpcap (Tcpdump, Ethereal),
- Anti anti sniff option.....
Please install winpcap ( http://netgroup-serv.polito.it/winpcap ) before running myNetMon.
Please uninstall old versions before installing this version.
This download is marked as adware because it displays advertisement banners or other type of commercials while running.