Stray Thoughts

 nmap 5.61TEST4 released with a number of interesting features.

• a spidering library and associated scripts for  crawling websites.
• 51 new NSE scripts, bringing the total to 297.
• a substantial decrease in the size of the Mac OS X installer due to the removal of PPC support.
• a new vulnerability management library which stores and reports found vulnerabilities.

More information can be found in the release notes.

Tags: NMAP, Networking

This is the second release candidate of the upcoming 1.6 (stable) branch. This new branch contains several new enhancements and bug fixes. For example, support for files greater than 2 GB, it can export SSL session keys, it can export SMB objects, graphs now save as PNG images by default to name a few. It also supports a large number of new protocols. This update can be downloaded here.

Tags: Wireshark, networking

Check it out here : http://www.winpcap.org/install/default.htm

Tags: networking

Network Monitor 3.3 is a protocol analyzer. It allows you to capture network traffic, view and analyze it. Version 3.3 is an update and replaces Network Monitor 3.2. Network Monitor 3.x is a complete overhaul of the previous Network Monitor 2.x version.

The Network Monitor core engine has been decoupled from the parser set. To install the full Network Monitor 3.3 product:

• Run the setup.exe for the platform you are installing.
• You will be prompted first to install the core engine. Follow the installation directions. Make sure you close existing instances of netmon.exe, nmcap.exe and any running NMAPI applications.
• Next you will be prompted to install the parser package. Follow the installation directions.

To uninstall the full Network Monitor 3.3 product:

• Go to Add/Remove Programs in Control Panel
• Uninstall both Microsoft Network Monitor 3.3 and Microsoft Network Monitor: Microsoft Parsers 3.3.

Download : Microsoft Downloads

Tags: microsoft, networking

Wireshark released a new version (1.0.4). The new version includes a number of security fixes. For details, see http://www.wireshark.org/news/20081020.html .

Just by its nature of including a large number of protocol parsers, Wireshark is a somewhat risky program. To mitigate the risk, collect traffic using a simpler program like tcpdump, and later analyze the traffic in wireshark using a low privilege account.

Tags: security, networking