Section: .. / sniffers /
| /// File Name: |
NetPacket-0.01.tar.gz |
Description:
|
NetPacket::* 0.01 - The NetPacket::* bundle of modules disassemble network packets into a Perl hash for various Internet protocols. There are hooks for assembly of packets, but they have not been implemented in this version. At present, decoding for the following protocols has been implemented: Ethernet, ARP, ICMP, IGMP, IP, UDP, TCP.
| | Author: | Tim Potter | | Changes: | Initial version. | | File Size: | 8940 | | Last Modified: | Aug 16 20:13:57 1999 |
| MD5 Checksum: | 0761ff2f6caf4961dcd5778cf7e1e6d1 |
|
| /// File Name: |
iptraffic-v0.01.zip |
Description:
|
iptraffic is a set of scripts that can be used to learn more about network protocols, PERL, and MySQL database usage.
| | Author: | Randy Nash | | Homepage: | http://www.atriskonline.com | | File Size: | 8932 | | Last Modified: | Apr 14 02:21:47 2005 |
| MD5 Checksum: | 0f811132963159ee0aef26669ba3e6d8 |
|
| /// File Name: |
FlashFXP.tgz |
Description:
|
FlashFXP Account Spy 1.0 - Utility to capture login credentials of FlashFXP.
| | Author: | Lympex | | Homepage: | http://l-bytes.tk | | File Size: | 8306 | | Last Modified: | Feb 25 17:07:38 2006 |
| MD5 Checksum: | 910ca515c299d05cafaa56d48bd387dc |
|
| /// File Name: |
aimsniff-0.4.tar.gz |
Description:
|
AIM Sniff is a utility for monitoring and archiving AOL Instant Messenger messages across a network which has the ability to do a live dump (actively sniff the network) or read a PCAP file and parse the file for IM messages. You also have the option of dumping the information to a MySQL database or STDOUT. AIM Sniff will also monitor for an AIM login and then perform an SMB lookup on the originating computer in order to match NT Domain names with AIM login names (handles). A basic Web frontend is included.
| | Homepage: | http://sourceforge.net/projects/aimsniff | | Changes: | Better parsing of messages. A Web front end was added to monitor what AIM Sniff has seen. Now uses SMB to look up the NT username of the user's originating IP address. New switches were added, and can be listed with the "-h" switch. | | File Size: | 7125 | | Last Modified: | Sep 11 03:20:43 2002 |
| MD5 Checksum: | f29b11d89fcf6460c72e6cd193764934 |
|
| /// File Name: |
linsniff666.c |
Description:
|
LinSniffer version 666.
| | File Size: | 6861 | | Last Modified: | Aug 16 20:13:44 1999 |
| MD5 Checksum: | 08f8a89b603cc383b95947cd487c27f6 |
|
| /// File Name: |
nagini.c |
Description:
|
A simple TCP packetlogger/sniffer for Linux which includes background logging.
| | Author: | Sacrine | | Homepage: | http://www.netric.org | | File Size: | 6678 | | Last Modified: | Apr 29 23:39:23 2003 |
| MD5 Checksum: | 1fd4d09775f7679f37c9758b4eb7aecc |
|
| /// File Name: |
synsniff11.tar.gz |
Description:
|
synsniff, as the name would imply, is a simple program which watches for the first part of a TCP connection (the SYN packet) and logs it. Optionally, synsniff can detect FIN (end of session) packets with no corrosponding SYN; this is useful for discovering stealth FIN scans. It is primarily a TCP connection logger but also includes some portscan detection heuristic. It logs incoming SYN and FIN packets to stdout, and also detects portscans by watching for multiple incoming connections within a short timeout (default threshold is 7 connections per second).
| | Homepage: | http://www.jammed.com/%7Ejwa/Security/ | | File Size: | 6415 | | Last Modified: | Dec 12 17:04:38 1999 |
| MD5 Checksum: | 4cfbf3f150fe77ff5656d2a22c3bf0d9 |
|
| /// File Name: |
FlashFXP.Account.Spy.1.5.c |
Description:
|
FlashFXP Account Spy 1.5 - Utility to capture login credentials of FlashFXP.
| | Author: | Lympex | | Homepage: | http://l-bytes.tk | | File Size: | 6346 | | Last Modified: | Apr 17 00:44:40 2007 |
| MD5 Checksum: | f6dd606acdd94f6c27610414a0a0208e |
|
| /// File Name: |
tgk-log-2.4.tar.gz |
Description:
|
tgk-log 2.4 - A remade version of linsniffer, no longer recording just contents of a packet but some additional information. Designed to be used for logging the traffic through a ipmasq gateway. More TCP, UDP, ICMP support, and code optimization with this release.
| | Author: | EF | | Homepage: | http://ccitt5.net/archive/ | | File Size: | 6333 | | Last Modified: | Mar 31 05:16:00 2000 |
| MD5 Checksum: | b659596929d26a430ea31372dd0b2b56 |
|
| /// File Name: |
Qsniffer-0.3.tar.gz |
Description:
|
Qsniffer is a simple ethernet sniffer written in C that works on most Unix systems and has filter expressions to filter the captured packets.
| | Author: | Qnix | | Homepage: | http://www.0x80.org/ | | File Size: | 6232 | | Last Modified: | Mar 3 15:49:23 2008 |
| MD5 Checksum: | a11bf93bc789e4be825dd444c26be986 |
|
| /// File Name: |
MiM.c |
Description:
|
MiM can be used to redirect the flow between two hosts through a third host which logs it in tcpdump/pcap format. We use unsolicited ARPs to do this and the redirector listens for, and responds to, future ARP requests for the addresses in question, so the redirection should remain fairly persistent even when ARP caches expire. I put it together primarily to demonstrate that, yes, you can sniff in a switched environment. It just requires a couple ARPs.
| | Author: | Trevor Schroeder | | File Size: | 6118 | | Last Modified: | Feb 9 15:14:50 2000 |
| MD5 Checksum: | 4744ee0cc53a88b4f341ab0697225d2e |
|
| /// File Name: |
smit.tar.gz |
Description:
|
Smit is a simple ARP hijacking tool for switched and unswitched networks. The source is based on arpmitm and arprelay and includes nice features such as automatic ARP MAC query and an improved MAC cache consistence algorithm. You can also run Smit in transproxy-only mode and use your favourite sniffer to capture 'hijacked' packets on switched networks.
| | Author: | Paul Starzetz | | File Size: | 5721 | | Last Modified: | Jun 28 23:51:37 2000 |
| MD5 Checksum: | 771a34d98d040d197c65efb7bf7e33a1 |
|
| /// File Name: |
katsniff.c |
Description:
|
A simple ICMP/TCP/UDP packet sniffer that was written for and tested on Linux.
| | Author: | Kris Katterjohn | | File Size: | 5642 | | Last Modified: | Nov 16 12:33:57 2006 |
| MD5 Checksum: | 047cbc79c160dd2b932a853e25639043 |
|
| /// File Name: |
ipdump.c |
Description:
|
IP Dump is a simple network traffic dump program for Linux 2.x; although it is similar to tcpdump, it does not require the libpcap library.
| | Author: | Christophe Devine | | Homepage: | http://www.cr0.net:8040/about | | File Size: | 5540 | | Last Modified: | Dec 15 00:03:22 2003 |
| MD5 Checksum: | 633e04d0c22d956a4305b222935ff46e |
|
| /// File Name: |
snuff-v0.8.1.tar.gz |
Description:
|
Snuff is a packet sniffer for Linux 2.0/2.2 that can monitor many streams at once. It can also mail and wipe the log if reached a specified size.
| | Author: | Noah | | Homepage: | http://ns2.crw.se/~tm/ | | Changes: | No more crap in the sniff logs anymore - Checking the size of the ip & tcp header now. Added the keepopen parameter for the log file and fixed a y2k bug. | | File Size: | 5532 | | Last Modified: | May 30 16:07:42 2000 |
| MD5 Checksum: | d185f08af18e5f162c63e3b184e32c40 |
|
| /// File Name: |
yaggs.c |
Description:
|
Sniffer for "Gadu Gadu", which is a chat program in the style of MS Messenger/Yahoo Messenger, but aimed at Poland / Polish-speaking people.
| | Author: | ch0mik | | File Size: | 5139 | | Last Modified: | May 7 10:49:37 2005 |
| MD5 Checksum: | 2a67a7894781e7129c19d7ac57b13572 |
|
| /// File Name: |
snuff-v0.7.1.tar.gz |
Description:
|
Snuff is a packet sniffer for Linux 2.0/2.2 that can monitor many streams at once. It can also mail and wipe the log if reached a specified size.
| | Author: | Noah | | Homepage: | http://ns2.crw.se/~tm/ | | File Size: | 5086 | | Last Modified: | Jan 28 18:47:45 2000 |
| MD5 Checksum: | 4233057c89dde694a2671a13ee61077e |
|
| /// File Name: |
icopy.tgz |
Description:
|
This utility provides a datalink bridge working in userspace that allows captured packets from one ethernet interface to be retransmitted over a non-ethernet interface.
| | Author: | xenion | | Homepage: | http://xenion.antifork.org | | File Size: | 4286 | | Last Modified: | Jun 24 22:51:42 2003 |
| MD5 Checksum: | 2ac6a902e2a85f26389e97b24217456e |
|
| /// File Name: |
aldebaran-3.0.1.tar.gz |
Description:
|
Aldebaran is an advanced libpcap-based network TCP, UDP, and ARP network sniffer which gives a user only a payload from captured data and basic info about addresses and ports (nothing about flags, etc.). This is useful for monitoring data sent by connections and sniffing passwords. It supports filtering packets with not only simple port/address libpcap rules but also payload contents and can send captured data to another host via UDP. It can also encrypt data written to a dump file, analyze interface traffic, and present statistics (packet count, sizes, average speed, etc.) in HTML or a plain text file.
| | Homepage: | http://www.rogala.3d.pl/ | | File Size: | 4096 | | Last Modified: | Jul 17 17:01:53 2001 |
| MD5 Checksum: | 9388ccc391f69ec63a81b66803856dca |
|
| /// File Name: |
tgk-log.tar.gz |
Description:
|
tgk-log 2.1 - A remade version of linsniffer, no longer recording just contents of a packet but some additional information. Designed to be used for logging the traffic through a ipmasq gateway. UDP & ICMP support, and code optimization with this release.
| | Author: | The c5 Project | | File Size: | 4035 | | Last Modified: | Aug 16 20:13:50 1999 |
| MD5 Checksum: | b783fe7bee18081e37bfcf225a0c7119 |
|
| /// File Name: |
cdpsniffer-v1.0.tar.gz |
Description:
|
CDPsniffer is a small perl Cisco discovery protocol (CDP) decoding sniffer. It sniffs the network traffic, picks out the CDP packets and prints out the decoded protocol contents.
| | Author: | Max Moser | | Homepage: | http://www.remote-exploit.org | | File Size: | 3542 | | Last Modified: | Sep 12 08:34:59 2002 |
| MD5 Checksum: | a8abba264e411904c953c9b4593c91da |
|
| /// File Name: |
sncs.c |
Description:
|
Sncs.c is a simple SNMP Community name sniffer. Although many sniffers sniff the community names, this one is dedicated to it.
| | Author: | Delorean | | Homepage: | http://www.s0ftpj.org | | File Size: | 3527 | | Last Modified: | Dec 8 04:01:11 2000 |
| MD5 Checksum: | 30dc44603aacd95be5dd4e22eba8c1ff |
|
| /// File Name: |
ndump.tgz |
Description:
|
NDump is a collection of Perl programs to log and parse incoming packets. It is very unique in that it is one of the only loggers to log machine level information as well.
| | Author: | H1kari | | Homepage: | http://www.nfsg.org/downloads/ndump.html | | File Size: | 3479 | | Last Modified: | Nov 15 21:14:03 1999 |
| MD5 Checksum: | c686db0da36133e535eb508a567f264a |
|
| /// File Name: |
katsnoop.tbz2 |
Description:
|
Utility that sniffs HTTP Basic Authentication information and prints the base64 decoded form.
| | Author: | Kris Katterjohn | | File Size: | 3441 | | Last Modified: | Nov 26 22:18:05 2006 |
| MD5 Checksum: | 12d40e120b774b2fc6bc909178815f7a |
|
| /// File Name: |
sw-mitm.tar.gz |
Description:
|
Sw-mitm v0.2 is a 'Man in the Middle' tool for level2 switches which can redirect traffic between two hosts on a LAN.
| | Author: | Noah | | Homepage: | http://ns2.crw.se/~tm | | File Size: | 3373 | | Last Modified: | Jan 31 15:28:20 2001 |
| MD5 Checksum: | fa66d4a711e0b9e6318200bf1561db8f |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
