Although commercial, the free version is very useful.
"NetworkMiner is a Network Forensic Analysis Tool (NFAT) for Windows (but also works in Linux / Mac OS X / FreeBSD). NetworkMiner can be used as a passive network sniffer/packet capturing tool in order to detect operating systems, sessions, hostnames, open ports etc. without putting any traffic on the network. NetworkMiner can also parse PCAP files for off-line analysis and to regenerate/reassemble transmitted files and certificates from PCAP files."
"You can run NetworkMiner directly from the USB flash drive since NetworkMiner is a portable application that doesn't require any installation. We at Netresec do, however, recommend that you copy NetworkMiner to the local hard drive of your computer in order to achieve maximum performance."
Website and download: https://www.netresec.com/?page=NetworkMiner
NetworkMiner
Re: NetworkMiner
I have kind of an odd setup so I'm not sure if it was working well or not. The output I got was fairly similar to what I saw on the Softpedia screenshot list:
http://www.softpedia.com/get/Network-To ... iner.shtml
... which didn't include images. I was pleased however that the program doesn't require installation of WinPcap unlike some other tools here on the site but I'm fairly sure it requires admin.
The free version is evidently open source with a GPLv2 license:
http://sourceforge.net/projects/networkminer/
http://www.softpedia.com/get/Network-To ... iner.shtml
... which didn't include images. I was pleased however that the program doesn't require installation of WinPcap unlike some other tools here on the site but I'm fairly sure it requires admin.
The free version is evidently open source with a GPLv2 license:
http://sourceforge.net/projects/networkminer/
- __philippe
- Posts: 687
- Joined: Wed Jun 26, 2013 2:09 am
Re: NetworkMiner
NetworkMiner v2.3 does NOT work under WinXP any longer...
...unlike older v2.1.1 which still runs fine thereunder...
...unlike older v2.1.1 which still runs fine thereunder...
- __philippe
- Posts: 687
- Joined: Wed Jun 26, 2013 2:09 am
Re: NetworkMiner
Word of advice from a once-bitten, unwary (yet eager), NM first-time user:
Check your installed .NET Framework versions first
NM NetworkMiner versions and .NET Framework pre-requisites :
• NM 2.4.0 requires .NET Framework 2.5
• NM 2.5.0 and higher versions require .NET Framework 4.7.2
Arcane CLI incantation to discover your very own .NET Framework version(s) ...(courtesy NM developer Erik Hjelmvik)
Check your installed .NET Framework versions first
NM NetworkMiner versions and .NET Framework pre-requisites :
• NM 2.4.0 requires .NET Framework 2.5
• NM 2.5.0 and higher versions require .NET Framework 4.7.2
Arcane CLI incantation to discover your very own .NET Framework version(s) ...
Code: Select all
reg query "HKLM\SOFTWARE\Microsoft\Net Framework Setup\NDP" /s | findstr Version
Re: NetworkMiner
According to Microsoft, you should also look into the "Installed" values.__philippe wrote: ↑Tue Oct 27, 2020 8:30 am Arcane CLI incantation to discover your very own .NET Framework version(s) ...(courtesy NM developer Erik Hjelmvik)Code: Select all
reg query "HKLM\SOFTWARE\Microsoft\Net Framework Setup\NDP" /s | findstr Version
They also link to this CLI tool: DotNetVersions.
Re: NetworkMiner
Update: still in development with the last update back in Sept for v2.6: https://www.netresec.com/?page=NetworkMiner