Download List

Project Description

netsniff-ng is a high performance Linux network sniffer for packet inspection. It is similar to analyzers like tcpdump, but without the need to perform system calls for fetching network packets. A memory-mapped area within kernelspace will be used for accessing packets, so there is no requirement for copying them to userspace (a 'zero-copy' mechanism). For this purpose, netsniff-ng is libpcap independent, but nevertheless supports the pcap file format for capturing, replaying, and performing offline analysis of pcap dumps. The project is focused on building a robust, clean, and secure analyzer and utilities that complete netsniff-ng as a support for penetration testing. netsniff-ng can be used for protocol analysis, reverse engineering, and network debugging.

System Requirements

System requirement is not defined
Information regarding Project Releases and Project Resources. Note that the information here is a quote from Freecode.com page, and the downloads themselves may not be hosted on OSDN.

2010-10-10 03:51
0.5.5.0

The PCAP file format is supported, which enables netsniff-ng to dump, read, and replay traces to or from harddisk. Lots of new packet printing options were added, targeted for debugging and reverse engineering. Automatic NIC IRQ affinity adaption is done if netsniff-ng is bound to a specific CPU. The possibility to manually set up ring size was added. POSIX compatible extended regular expression based filtering of packet content was implemented.

2010-02-18 23:30
0.5.4.2

This minor release fixes an issue where, under specific conditions, netsniff-ng's rx_ring stops receiving packets. Furthermore, basic BPF checks have been added.

2010-01-03 02:08
0.5.4.1

This is principally a bug and security fix release. A bug in memset that affects 32-bit systems has been fixed.

2009-12-31 07:54
0.5.4

Better usability. Better packet visualization. Scheduler tweaks. Setting process affinity to a specific CPU on demand (via Param). Major code refactoring. An option for running netsniff-ng in non-blocking mode. fixes for small bugs / memory leaks. SIGHUP ignorance. A high-resolution timer. PID output during startup. Verbose/silent mode can now be switched on and off during runtime via SIGUSR2.

2009-12-08 00:48
0.5.3

Some minor changes were made.

Project Resources