Someone made portable versions of ethereal, ngrep, nmap, showtraf, snort, tdump, and nemesis by recompiling with a portable packet lib...
Repeat: His didn't need WinPCap installed.
His email is: [email protected]
http://www.packetstuff.com/index.htm
(His site's dead but google has a cache of the main page)
His Google Newsgroup is still up though.
http://groups.google.com/group/PacketStuff?hl=en
The library's site is here
And it can be ed here
.
About Packet Sniffer SDK (from developers' site):
Packet Sniffer SDK is a library set for packet capture and network analysis for all Win32 platforms.
The main features of the Packet Sniffer SDK library are:
- Any pre-installed packet drivers are NOT required;
- of 1GBit networks;
- of all modern development environments for Windows;
- All PSSDK editions (ActiveX, VCL, DLL, and static libraries) are compiled from the same well-optimized C code. Therefore you may be assured that any Packet Sniffer SDK improvement is implemented in all its editions;
- of multiprocessor (SMP) systems;
- of packet filtering by BPF (BSD Packet Filter, -settable packet filters) on the internal packet driver level;
- of new FastBPF technology (Just-In-Time BPF filters compilation, works approximately 6 times faster than "classic" BPF filtering);
- of packet generation and sending functions;
- of local T/UDP traffic capturing with binding it to processes (including loopback traffic);
- Assembling of T sessions in data streams;
- High-performance traffic delivering to application and buffering it using queue mechanism;
- of BPF assembler for BPF filters programming;
- of disassembling BPF filters to BPF assembler source texts;
All editions of Packet Sniffer SDK components/libraries contain internal packet driver, which is dynamically loaded/unloaded when the application, using Packet Sniffer SDK, is launched/closed.