Tools Required

[.TuG.Beaver]

The tools required to be installed onto the GR:AW2 dedicated server are:

 

1. WinPcap - The Windows Packet Capture Library

 

WinPcap is the industry-standard tool for link-layer network access in Windows environments: it allows applications to capture and transmit network packets bypassing the protocol stack, and has additional useful features, including kernel-level packet filtering, a network statistics engine and support for remote packet capture.

WinPcap consists of a driver, that extends the operating system to provide low-level network access, and a library that is used to easily access the low-level network layers. This library also contains the Windows version of the well known libpcap Unix API.

 

The latest stable version of winpcap (v4.0.1) can be downloaded here:

 

http://www.winpcap.org/install/default.htm

 

 

Note: Winpcap requires to be installed on the server, so you will need full remote access to perform this function.

2. ngrep - Network grep

 

ngrep strives to provide most of GNU grep's common features, applying them to the network layer. ngrep is a pcap-aware tool that will allow you to specify extended regular or hexadecimal expressions to match against data payloads of packets. It currently recognizes IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw across Ethernet, PPP, SLIP, FDDI, Token Ring and null interfaces, and understands BPF filter logic in the same fashion as more common packet sniffing tools, such as tcpdump and snoop.

 

The latest stable version of winpcap (v1.4.5) can be downloaded here:

 

http://ngrep.sourceforge.net/download.html