IP Sniffer 1.97.1.2

ipsniffer-19712 IP Sniffer is a suite of intellectual property tools built around a packet sniffer.

The packet sniffer can work on all versions of Windows using either the new raw materials implementation of Windows2000 (driver) or WinPCAP (must be installed) or a protocol NDIS (must be installed, not restart).
The sniffer has the basic characteristics of filter, decode, replay, analyze.

The packet sniffer can work on all versions of Windows using either:
* The latest vintage of implementation taken Windows2000 (driver),
* WinPCAP (must be installed),
* A protocol NDIS (must be installed, not restart).

The sniffer has the basic characteristics of filter, decode, replay, analyze, etc.

The IP Sniffer tools are as follows:
* Monitor bandwidth. view
* Adapter statistics (PI and NDIS). view
* Stumbler wirelessly.
* List and managing the entries ARP, IP address to / from MAC, ARP scanning, Create proxy ARP, send a Wakeup Call, RARP client / server, ARP Watch. view
* List and manage roads, and can disable host as a router. view
* List and manage open ports and processes attached. Go Go
* See network configuration (interfaces, adapters, parameters).
* Hook Winsock calls.
* Spoof ARP (ARP and not cache poisoning), TCP, UDP, ICMP, DHCP.
* Change MAC address. view
* SNMP & Get Set, List of interfaces, Switch port mapper, the media Annex Table unit costs, net media table, statistics network, the connection table.
* Query WINS.
* DNS (advanced) Query, DNS Server, local resolver.
* DHCP Server (with support PXE), DHCP Discover.
* Query Whois IP Location.
* Client mail (SMTP and MAPI).
* TCP tools:
o TCP ping, TCP half scan, day-time client / server.
o Server HTTP, FTP Server.
o HTTP Proxy, Bouncer Telnet, FTP Bouncer.
o LPR Client.
* UDP tools (MSSQL Ping, ping SNMP, SSDP ping, Syslog client / server, day-time client / server, server TFTP).
* Tools ICMP (Ping, GetBestRoute, GetRTTAndHopCount).
* TCP / UDP port rebound.
MS * Networks:
o Spoof net send, stopping distance windows, remote display windows properties, NetAPI services Terminal Services processes and sessions, Winspool services, drivers at a distance, remote to work at a distance of the scheduled tasks on connected users, remote users dump, manage DHCP, MS SQL Process, MS Perf counters, remote processes, event logs from a distance.
* Password tools:
o protected storage (IE, Outlook Express,…), LSA secrets, Dialup passwords, Credentials XP (MSN, network shares,…), IE history, reveal asterisks / passwords hidden RDP words password, passwords Msaccess, enum WEP key, MS SQL Enterprise manager passwords, default passwords known.
* Other / System Tools:
o Managing the process, open files, Windows handles, events for the process / events / changes files, bandwidth test (on the basis of iperf), devices to manage windows, the editor of VBS scripts , WMI browser, create maps with Graphviz, manage ACL.

What’s New in IP Sniffer Version 1.97:
* Added: savetodb / loadfromdb function in your favorite window (tested with mssql OLEDB, MySQL ODBC, excel odbc (do not forget the []))
* Added: objects of navigation database
* Correction: bugs in the GUI rrdtools
* Fixed: support values double PerfMon
* Added: oid can chart a value in snmpget
* Added: url block is based on keywords in proxy http (TODO: filter meta keywords)
* Added: can filter all loading a file capture
* Correction: filter for motor ndis5pkt
* Correction: = capture_mode gross default
* Added: toolbarview & stayontop stored in config.ini
* Added: debug option in config.ini (hookwindows, hookGetProcAddress, hookmem)
* Update: updated later madexcept version 3.0h
* Added: Arp eve
* Added: STP decoder
* Added: dot1stpporttable & stp data
* Added: delete arp entry into snmp ARP table
* Added: flood fraudulent option arp
* TODO: MITM (handle router and redirect victim), ipconflict (reply with ipsrc victim macsrc = = & others) attacks
* Added: WTSWaitSystemEvent / WTSShutdownSystem / WinStationServerPing / WTSQueryUserToken (must run as LocalSystem)
* Update: raw_sniffer is created solely for early action
* Correction: print spooler is stopped / started including dependencies
* Added: geographical location and using api.hostip.info googlemaps
* TODO: check TcpTimedWaitDelay
* Added: rpcap support main window