RawCap | a sniffer for Windows

RawCap - sniffer for Windows

Today i am going to write about a new released sniffer tool for windows. If you do not know about sniffer, read my post on snifefr introduction 

That tool is RawCap which is free raw sockets sniffer for Windows. It is a command line tool. Tutorials of the tools can be found on the official website of the tool.

Features

These are some features of RawCap

• Can sniff any interface that has got an IP address, including 127.0.0.1 (localhost/loopback)
• RawCap.exe is just 17 kB
• No external libraries or DLL's needed
• No installation required, just download RawCap.exe and sniff
• Can sniff most interface types, including WiFi and PPP interfaces
• Minimal memory and CPU load
• Reliable and simple to use

Usage

RawCap takes two arguments; the first argument is the IP address or interface number to sniff from, the second is the path/file to write the captured packets to.

C:\Tools>RawCap.exe 192.168.0.23 dumpfile.pcap

You can also start RawCap without any arguments, which will leave you with an interactive dialog where you can select NIC and filename:

C:\Tools>RawCap.exe

Network interfaces:

0.     192.168.0.23    Local Area Connection

1.     192.168.0.47    Wireless Network Connection

2.     90.130.211.54   3G UMTS Internet

3.     192.168.111.1   VMware Network Adapter VMnet1

4.     192.168.222.1   VMware Network Adapter VMnet2

5.     127.0.0.1       Loopback Pseudo-Interface

Select network interface to sniff [default '0']: 1

Output path or filename [default 'dumpfile.pcap']:

Sniffing IP : 192.168.0.47

File        : dumpfile.pcap

Packets     : 1337

read More

Download Here:

http://www.netresec.com/products/RawCap/RawCap.exe