SmartSniff v2.29
Copyright (c) 2004 - 2018 Nir Sofer
Web site: http://www.nirsoft.net
Description
===========
SmartSniff allows you to capture TCP/IP packets that pass through your
network adapter, and view the captured data as sequence of conversations
between clients and servers. You can view the TCP/IP conversations in
Ascii mode (for text-based protocols, like HTTP, SMTP, POP3 and FTP.) or
as hex dump. (for non-text base protocols, like DNS)
SmartSniff provides 3 methods for capturing TCP/IP packets :
1. Raw Sockets (Only for Windows 2000/XP or greater): Allows you to
capture TCP/IP packets on your network without installing a capture
driver. This method has some limitations and problems.
2. WinPcap Capture Driver: Allows you to capture TCP/IP packets on all
Windows operating systems. (Windows 98/ME/NT/2000/XP/2003/Vista) In
order to use it, you have to download and install WinPcap Capture
Driver from this Web site. (WinPcap is a free open-source capture
driver.)
This method is generally the preferred way to capture TCP/IP packets
with SmartSniff, and it works better than the Raw Sockets method.
3. Microsoft Network Monitor Driver (Only for Windows 2000/XP/2003):
Microsoft provides a free capture driver under Windows 2000/XP/2003
that can be used by SmartSniff, but this driver is not installed by
default, and you have to manually install it, by using one of the
following options:
* Option 1: Install it from the CD-ROM of Windows 2000/XP
according to the instructions in Microsoft Web site
* Option 2 (XP Only) : Download and install the Windows XP
Service Pack 2 Support Tools. One of the tools in this package is
netcap.exe. When you run this tool in the first time, the Network
Monitor Driver will automatically be installed on your system.
4. Microsoft Network Monitor Driver 3: Microsoft provides a new
version of Microsoft Network Monitor driver (3.x) that is also
supported under Windows 7/Vista/2008. Starting from version 1.60,
SmartSniff can use this driver to capture the network traffic.
The new version of Microsoft Network Monitor (3.x) is available to
download from Microsoft Web site.
Notice: If WinPcap is installed on your system, and you want to use the
Microsoft Network Monitor Driver method, it's recommended to run
SmartSniff with /NoCapDriver, because the Microsoft Network Monitor
Driver may not work properly when WinPcap is loaded too.
System Requirements
===================
SmartSniff can capture TCP/IP packets on any version of Windows operating
system (Windows 98/ME/NT/2000/XP/2003/2008/Vista/7/8/10) as long as
WinPcap capture driver is installed and works properly with your network
adapter.
You can also use SmartSniff with the capture driver of Microsoft Network
Monitor, if it's installed on your system.
Under Windows 2000/XP (or greater), SmartSniff also allows you to capture
TCP/IP packets without installing any capture driver, by using 'Raw
Sockets' method. However, this capture method has some limitations and
problems:
* Outgoing UDP and ICMP packets are not captured.
* On Windows XP SP1 outgoing packets are not captured at all - Thanks
to Microsoft's bug that appeared in SP1 update...
This bug was fixed on SP2 update, but under Vista, Microsoft returned
back the outgoing packets bug of XP/SP1.
* On Windows Vista/7/8: Be aware that Raw Sockets method doesn't work
properly on all systems. It's not a bug in SmartSniff, but in the API
of Windows operating system. If you only see the outgoing traffic, try
to turn off Windows firewall, or add smsniff.exe to the allowed
programs list of Windows firewall.
Versions History
================
* Version 2.29:
* Fixed bug from version 2.28: SmartSniff crashed when selecting
loopback interface or other network interfaces without connection
information.
* Version 2.28:
* The information of the selected network adapter is now displayed
in the window title.
* Version 2.27:
* Fixed the lower pane to switch focus when pressing tab key.
* Version 2.26:
* SmartSniff now automatically loads the new version of WinPCap
driver from https://nmap.org/npcap/ if it's installed on your system.
* SmartSniff now tries to load the dll of Network Monitor Driver
3.x (NmApi.dll) according to the installation path specified in
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Netmon3. This change should
solve the problem with loading the Network Monitor Driver 3.x on some
systems.
* Version 2.25:
* Added 4 columns to the adapters list in the 'Capture Options'
window: 'Connection Name', 'MAC Address', 'Instance ID', 'Interface
Guid'.
* When using WinPCap driver , SmartSniff now displays more accurate
information in the adapters list of the 'Capture Options' window.
* Fixed the 'Retrieve process information while capturing packets'
feature to work on Windows 10/8/7.
* Version 2.20:
* Added option to capture traffic on 127.0.0.1 (Loopback) to 'Raw
Sockets' capture method (For Windows Vista or later).
* Version 2.17:
* Added 'Find In Upper Pane' option.
* Version 2.16:
* Fixed bug: SmartSniff failed to remember the last size/position
of the main window if it was not located in the primary monitor.
* Version 2.15:
* Added 'Capture is Active' check-box (F11) under the File menu.
You can now temporary suspend/resume the capture simply by pressing
the F11 key.
* Version 2.11:
* Added 'Always On Top' option.
* Added secondary sorting support: You can now get a secondary
sorting, by holding down the shift key while clicking the column
header. Be aware that you only have to hold down the shift key when
clicking the second/third/fourth column. To sort the first column you
should not hold down the Shift key.
* Version 2.10:
* SmartSniff now allows you to automatically add it to the allowed
programs list of Windows firewall when starting to capture and remove
it when you stop capturing. This option is needed when using the 'Raw
Socket' capture method while Windows firewall is turned on, because
if SmartSniff is not added to Windows firewall, the incoming traffic
is not captured at all.
* Version 2.08:
* SmartSniff now remembers the last file type you selected in 'Load
Packets Data From File' option.
* Fixed the window title of 'Display Filter' option.
* Version 2.07:
* Fixed to flickering in the upper pane.
* Version 2.06:
* Fixed to display HTTP POST URLs on 'URL List' display mode.
* Version 2.05:
* Added 'Capture On Program Start' option.
* Added 'Mark Odd/Even Rows' option, under the View menu. When it's
turned on, the odd and even rows are displayed in different color, to
make it easier to read a single line.
* Version 2.00:
* Added support for GeoLite City database. You can now download the
GeoLite City database (GeoLiteCity.dat.gz), put it in the same folder
of smsniff.exe, and SmartSniff will automatically use it to get the
country/city information for every IP address.
* Added 'Auto Size Columns+Headers' option, which allows you to
automatically resize the columns according to the row values and
column headers.
* Version 1.95:
* Added Find option (Ctrl+F) to easily find text in the lower pane.
* Fixed issue: The properties dialog-box and other windows opened
in the wrong monitor, on multi-monitors system.
* Version 1.93:
* Fixed bug: When opening the 'Capture Options' dialog-box after
Network Monitor Driver 3.x was previously selected, SmartSniff
switched back to Raw Sockets mode.
* Version 1.92:
* Added accelerator key to the 'URL List' mode (Ctrl+F4)
* Version 1.91:
* Fixed a crash problem occurred with some Web pages when
qq258520089
- 粉丝: 45
- 资源: 6
最新资源
- 【全年行事历】5团建医药箱常备药清单.docx
- 【全年行事历】4团建活动物料清单.xlsx
- 【全年行事历】7团建活动策划书.docx
- 【全年行事历】ZOL团建活动策划方案.pptx
- 【全年行事历】XXX团建活动计划.pptx
- 【全年行事历】86团建活动培训PPT完.pptx
- 【全年行事历】公司年度活动计划.xls
- 【全年行事历】大型企业公司活动进度表.xlsx
- 【全年行事历】公司户外团建活动方案-某公司.pptx
- 【全年行事历】公司团建费用统计表.xlsx
- 【全年行事历】公司团建拓展行程方案-模版.docx
- 【全年行事历】公司全年团建活动方案.xls
- 【全年行事历】公司员工一年度关怀方案预算.xls
- 【全年行事历】公司团建活动项目介绍.pptx
- 【全年行事历】行政部年度活动策划及经费预算.xlsx
- 【全年行事历】行政全年活动筹备规划.xlsx
资源上传下载、课程学习等过程中有任何疑问或建议,欢迎提出宝贵意见哦~我们会及时处理!
点击此处反馈