You are here 705137

Portable WinPCap for Developers h5h3y

1 post / 0 new
Vhati
Offline
Last seen: 18 years 7 months ago
ed: 2006-09-26 18:27
Portable WinPCap for Developers

Someone made portable versions of ethereal, ngrep, nmap, showtraf, snort, tdump, and nemesis by recompiling with a portable packet lib...

Repeat: His didn't need WinPCap installed.

His email is: [email protected]
http://www.packetstuff.com/index.htm
(His site's dead but google has a cache of the main page)

His Google Newsgroup is still up though.
http://groups.google.com/group/PacketStuff?hl=en

The library's site is here
And it can be ed here

.

About Packet Sniffer SDK (from developers' site):

Packet Sniffer SDK is a library set for packet capture and network analysis for all Win32 platforms.

The main features of the Packet Sniffer SDK library are:

  • Any pre-installed packet drivers are NOT required;
  • of 1GBit networks;
  • of all modern development environments for Windows;
  • All PSSDK editions (ActiveX, VCL, DLL, and static libraries) are compiled from the same well-optimized C code. Therefore you may be assured that any Packet Sniffer SDK improvement is implemented in all its editions;
  • of multiprocessor (SMP) systems;
  • of packet filtering by BPF (BSD Packet Filter, -settable packet filters) on the internal packet driver level;
  • of new FastBPF technology (Just-In-Time BPF filters compilation, works approximately 6 times faster than "classic" BPF filtering);
  • of packet generation and sending functions;
  • of local T/UDP traffic capturing with binding it to processes (including loopback traffic);
  • Assembling of T sessions in data streams;
  • High-performance traffic delivering to application and buffering it using queue mechanism;
  • of BPF assembler for BPF filters programming;
  • of disassembling BPF filters to BPF assembler source texts;

All editions of Packet Sniffer SDK components/libraries contain internal packet driver, which is dynamically loaded/unloaded when the application, using Packet Sniffer SDK, is launched/closed.