Useful packet capture tool

1. Hping


Hping is one of the most popular and free packet capture tools. It allows you to modify and send custom ICMP, UDP, TCP and raw IP packets. This tool is used by network administrators for security auditing and testing of firewalls and networks.

HPing is available for a variety of platforms, including Windows, MacOs X, Linux, FreeBSD, NetBSD, OpenBSD, and Solaris.

Download Hping:  http://www.hping.org/

2. Stubborn

Ostinato is an open source and cross-platform network packet generator and analysis tool. It comes with a GUI interface which makes it easy to use and understand. It supports Windows, Linux, BSD and Mac OS X platforms. You can also try to use it on other platforms.

The tool supports the most common standard protocols. See the list of supported protocols below

Ethernet/ 802.3 / LLC SNAP
VLAN (with QinQ)
ARP, IPv4, IPv6, IP-in-IP aka IP Tunneling (6over4, 4over6, 4over4, 6over6)
TCP, UDP, ICMPv4, ICMPv6, IGMP, MLD
Any text-based protocol (HTTP, SIP, RTSP, NNTP, etc.)
By using Ostinato, you can easily modify any field of any protocol. This packet tool is also known as a second Wireshark.
Download Ostinato:  http://Ostinato Traffic Generator for Network Engineers

3. Scrappy

Scapy is another nice interactive packet processing tool. This tool is written in Python. It can decode or forge packets of a large number of protocols. Scapy is a tool worth trying. You can perform various tasks including scanning, tracing, probing, unit testing, network discovery.

Download Scapy:  https://scapy.net/

4. Libcrafter

Libcrafter is very similar to Scapy. This tool is written in C++ and makes it easier to create and decode network packets. It can create and decode packets for most common protocols, capture packets and match requests or replies. This tool can multi-thread to perform various tasks.

Download Libcrafter:  https://code.google.com/p/libcrafter/


5. Yersinia

Yersinia is a powerful network penetration testing tool capable of performing penetration tests on various network protocols. If you are looking for a packet capture tool , you can try this tool.

Download yersinia:  http://www.yersinia.net/

6. packETH

packETH is another packet processing tool. It is a Linux GUI ethernet tool. It allows you to quickly create and send sequences of packets. Like other tools on this list, it supports various protocols to create and send packets. You can also set the number of packets and the delay between packets, and you can also modify various packet contents in this tool.

Download packETH:  http://packeth.sourceforge.net/

7. Colasoft Packet Builder

Colasoft Packet Builder is also a free tool for creating and editing network packets. If you are a network administrator, you can use this tool to test your network. It works on all available versions of the Windows operating system.

Download Colasoft Packet Builder:  http://www.colasoft.com/download/products/download_packet_builder.php

8. Bit-Twist

Bit-Twist is a less popular but useful tool for regenerating captured packets in live traffic. It uses tcpdump to trace files (.pcap files) generated packets in the network. It comes with a trace file editor that allows you to change any specific field in the captured packets. Network administrators can use this tool to test firewalls, IDS and IPS, and troubleshoot various network issues. You can give this tool a try.

Download Bit-Twist:  http://bittwist.sourceforge.net/

9. Libtins

Libtins is also a great tool for crafting, sending, sniffing and parsing network packets. This tool is written in C++. C++ developers can extend the functionality of this tool to make it more powerful and perform its tasks more efficiently.

Download Libtins:  http://libtins.github.io/

10. Netcat

Netcat is also a popular tool for reading and writing data in TCP or UDP networks. It can create almost all kinds of network connections and port bindings.

This tool was originally called Hobbit and was released in 1995.

Download Netcat:  http://nc110.sourceforge.net/

11. WireEdit

WireEdit is a full-featured WYSIWYG network packet editor. You can edit all packet layers in a simple interface. This tool is free to use, but you have to contact the company to get access. It supports Ethernet, IPv4, IPv6, UDP, TCP, SCTP, ARP, RARP, DHCP, DHCPv6, ICMP, ICMPv6, IGMP, DNS, LLDP, RSVP, FTP, NETBIOS, GRE, IMAP, POP3, RTCP, RTP, SSH, TELNET, NTP, LDAP, XMPP, VLAN, VXLAN, CIFS/SMB v1 (original), BGP, OSPF, SMB3, iSCSI, SCSI, HTTP/1.1, OpenFlow 1.0-1.3, SIP, SDP, MSRP, MGCP, MEGACO (H .248), H.245, H.323, CISCO Skinny, Q.931/H.225, SCCP, SCMG, SS7 ISUP, TCAP, GSM MAP R4, GSM SM-TP, M3UA, M2UA, M2PA, CAPWAP, IEEE 802.11 etc.

It is also a multi-platform tool. It works on Windows XP and later, Ubuntu desktop and Mac OSX.

Download WireEdit:  https://wireedit.com/downloads.html


12. epb – Ethernet Packet Bombardier

Epb-Ethernet Packet Bombardier is also a similar tool. It allows you to send custom ethernet packets. This tool does not provide any GUI, but it is easy to use.

You can read more about this tool here:  http://maz-programmersdiary.blogspot.fi/2012/05/epb-ethernet-package-bombardier.html


13. Fragroute

Fragroute is a packet manipulation tool that intercepts, modifies and rewrites network traffic. You can use this tool to perform most network penetration tests to check the security of your network. This tool is open source and provides a command line interface to use. It is available for Linux, BSD and Mac OS.

Download Fragroute:  http://www.monkey.org/~dugsong/fragroute/

14. Mausezahn

Mausezahn is a network packet editor that lets you send every kind of network packet. This tool is used for penetration testing of firewalls and IDS, but you can use this tool in your network to find security bugs. You can also use this tool to test whether your network is safe from DOS attacks. Notably, it gives you full control over the NIC card. It supports ARP, BPDU, or PVST, CDP, LLDP, IP, IGMP, UDP, TCP (stateless), ICMP (partly), DNS, RTP, RTP optionally RX-mode for jitter measurements, Syslog protocols.

Download Mausezahn:  http://www.perihel.at/sec/mz/


15. EIGRP-tools

This is an EIGRP packet generator and sniffer combo. It was developed to test the security of the EIGRP routing protocol. To use this tool, you need to understand the layer 3 EIGRP protocol. This tool is also an open source tool with a command line interface. It is available for Linux, Mac OS and BSD platforms.

Download EIGRP-tools:  http://www.hackingciscoexposed.com/tools/eigrp-tools.tar.gz
 

Guess you like

Origin blog.csdn.net/weixin_45925028/article/details/132401820
Recommended