Difference between revisions of "Winpcap and Windump"

From Free Knowledge Base- The DUCK Project: information for everyone
Jump to: navigation, search
m
m
Line 1: Line 1:
<big>'''WinDump: tcpdump for Windows'''</big>
+
<big>'''WinPcap'''</big>
 +
 
 +
The Packet Capture and Network Monitoring Library for Windows
 +
 
 +
<big>'''WinDump'''</big>
 +
 
 +
tcpdump for Windows
  
 
WinDump is able to use the interfaces exported by WinPcap.  WinDump can run on all the operating systems supported by WinPcap, i.e. Windows 95, 98, ME, NT4, 2000, XP, 2003, Longhorn/Vista.
 
WinDump is able to use the interfaces exported by WinPcap.  WinDump can run on all the operating systems supported by WinPcap, i.e. Windows 95, 98, ME, NT4, 2000, XP, 2003, Longhorn/Vista.
Line 28: Line 34:
  
 
The complete windump manual:  http://www.winpcap.org/windump/docs/manual.htm
 
The complete windump manual:  http://www.winpcap.org/windump/docs/manual.htm
 +
 +
<big>'''myNetMon'''</big>
 +
 +
myNetMon, Network Monitor and Packet Analyzing Tool (V.2.0)
 +
 +
myNetMon is windows based network monitor and packet analyzing (sniffer) tool.
 +
myNetMon uses WinPcap, a windows port of Libpcap which is a packet capturing library.
 +
 +
*It does not seem to work with the lateset WinPcap.
 +
 +
 +
  
 
[[Category:Computer_Technology]]
 
[[Category:Computer_Technology]]
 
[[Category:Networking]]
 
[[Category:Networking]]
 
[[Category:Microsoft]]
 
[[Category:Microsoft]]

Revision as of 18:23, 7 July 2007

WinPcap

The Packet Capture and Network Monitoring Library for Windows

WinDump

tcpdump for Windows

WinDump is able to use the interfaces exported by WinPcap. WinDump can run on all the operating systems supported by WinPcap, i.e. Windows 95, 98, ME, NT4, 2000, XP, 2003, Longhorn/Vista.

  • windump -p : Capture in non-promiscuous mode.
  • windump -D : Show available interfaces.
  • windump -i 2 : Select the second network interface. It is easier to specify the interface number rather than by name.


man page

tcpdump - dump traffic on a network  
SYNOPSIS
tcpdump [ -AdDeflLnNOpqRStuUvxX ] [ -c count ]

        [ -C file_size ] [ -F file ]

        [ -i interface ] [ -m module ] [ -M secret ]

        [ -r file ] [ -s snaplen ] [ -T type ] [ -w file ]

        [ -W filecount ]

        [ -E spi@ipaddr algo:secret,... ]

        [ -y datalinktype ] [ -Z user ]
        [ expression ] 

The complete windump manual: http://www.winpcap.org/windump/docs/manual.htm

myNetMon

myNetMon, Network Monitor and Packet Analyzing Tool (V.2.0)

myNetMon is windows based network monitor and packet analyzing (sniffer) tool. myNetMon uses WinPcap, a windows port of Libpcap which is a packet capturing library.

  • It does not seem to work with the lateset WinPcap.