IP Sniffer is a suite of IP Tools built around a packet sniffer.

The packet sniffer can work on all Windows versions using either the new raw socket implementation of Windows2000 (driverless) or WinPcap (needs to be installed) or a NDIS protocol (needs to be installed , no reboot).

The sniffer has basic features like filter, decode, replay, parse…

The packet sniffer can work on all Windows versions using either:

• the new raw socket implementation of Windows2000 (driverless),
• WinPcap (needs to be installed),
• a NDIS protocol (needs to be installed , no reboot).

The sniffer has basic features like filter, decode, replay, parse, etc.

The IP tools are:

• Bandwidth monitor. view
• Adapter statistics (IP & NDIS). view
• Wireless Stumbler.
• List and manage ARP entries, resolve IP from/to MAC, ARP scan, Create ARP proxy, send a WAKEUP call, RARP client / server, ARP Watch. view
• List and manage routes, enable & disable host as a router. view
• List and manage open ports and attached processes. view view
• View network config (interfaces, adapters, parameters).
• Hook winsock calls.
• Spoof ARP (and do ARP cache poisoning), TCP, UDP, ICMP, DHCP.
• Change MAC address. view
• SNMP Get & Set, List interfaces, Switch port mapper, Media Attachment Unit table, Net to media table, network stats, connection table.
• WINS Query.
• DNS (advanced) Query, DNS Server, Local resolver.
• DHCP Server (with PXE support), DHCP Discover.
• Whois Query, IP Geo Location.
• Mail client (SMTP & MAPI).
• TCP tools:
  • TCP ping, TCP half scan, Time-Daytime client/server.
  • HTTP Server, FTP Server.
  • HTTP Proxy, Telnet Bouncer, FTP Bouncer.
  • LPR Client.
• UDP tools (MSSQL Ping, SNMP ping, SSDP ping, Syslog client/server, Time-Daytime client/server, TFTP server).
• ICMP tools (Ping, GetBestRoute, GetRTTAndHopCount).
• TCP/UDP bounce port.
• MS Networks:
  • Spoof net send, Shutdown remote windows, Display remote windows properties, Netapi services, Terminal Services processes and sessions, Winspool services, remote drivers, remote AT jobs, remote scheduled tasks, Logged on users, Dump remote users, manage DHCP services, MS SQL processes, MS Perf counters, remote processes, remote event logs.
• Password tools:
  • Protected storage (IE, Outlook Express, …) , LSA secrets, Dialup Passwords , XP Credentials ( MSN, network shares, …) , IE history, Reveal asterisks / hidden passwords, RDP passwords, MSAccess passwords, enum WEP keys, MS SQL enterprise manager passwords, Known default passwords.
• Other / System tools :
  • Manage processes, Opened files, Windows Handles, Events for processes/events/files changes, bandwidth tester (based on iperf), manage windows devices, VBS script editor, WMI browser, Create maps with Graphviz, manage ACL's.

What's New in version 1.98:

• Added: loadfromdb and savetodb will keep table history
• Added: save cap file with same link type as loaded cap file
• Added: find user / computer in ad browser
• Added: lastlogontimestamp in ad browser
• Added: update/add/delete db one item in bookmark
• Added: add/delete/create group & user in ad browser
• Added: winsock hook will display 127.0.0.1 traffic
• Added: winsock hook can save datas to cap file