RawCap

RawCap is a free command line network sniffer for Windows that uses raw sockets.

Properties of RawCap:

Can sniff any interface that has got an IP address, including 127.0.0.1 (localhost/loopback)

RawCap.exe is just 17 kB

No external libraries or DLL's needed other than .NET Framework 2.0

No installation required, just download RawCap.exe and sniff

Can sniff most interface types, including WiFi and PPP interfaces

Minimal memory and CPU load

Reliable and simple to use

Usage

You will need to have administrator privileges to run RawCap.

F:\Tools>RawCap.exe --help

NETRESEC RawCap version 0.1.2.0

http://www.netresec.com

Usage: RawCap.exe <interface_nr> <target_pcap_file>

 0.     IP        : 192.168.0.17

        NIC Name  : Local Area Connection

        NIC Type  : Ethernet

 1.     IP        : 192.168.0.47

        NIC Name  : Wireless Network Connection

        NIC Type  : Wireless80211

 2.     IP        : 90.130.211.54

        NIC Name  : 3G UMTS Internet

        NIC Type  : Ppp

 3.     IP        : 192.168.111.1

        NIC Name  : VMware Network Adapter VMnet1

        NIC Type  : Ethernet

 4.     IP        : 192.168.222.1

        NIC Name  : VMware Network Adapter VMnet2

        NIC Type  : Ethernet

 5.     IP        : 127.0.0.1

        NIC Name  : Loopback Pseudo-Interface

        NIC Type  : Loopback

Example: RawCap.exe 0 dumpfile.pcap

Read more: RawCap

Posted via email from Jasper-net