[tool] Network Minder

General security related topics not covered in other forums of this area.

Moderator: Community Moderators

Post Reply
muto
Posts: 417
Joined: Sat Mar 29, 2008 12:46 pm

[tool] Network Minder

Post by muto » Fri Feb 27, 2009 8:51 pm

Network Miner is a very nice packet sniffer I can across recently. It has two main features that set it apart from the common sniffers.

Firstly, it is aimed at gathering information about the hosts on the network, rather than the packets going across it, so you can build up a good picture of a network simply by passivly sniffing, and letting it pick up all the broadcast traffic. It also displays the information nicely, rather than having to dig through by hand, as you would with Wireshark.

However, the really unique thing about Network Miner is that is re-assembles the packets into files, and stores those locally for you to view. This includes web pages, pictures, audio and downloaded files.


The program takes two kinds of input. The first is to set it sniffing on a network adaptor, but unless you've done some APR (Cain or Ettercap work well here), you're only going to get local and broadcast traffic, so this is of limited use, despite telling you build up information without being detected.

The other is that you can open up a previous capture, (.pcap from Wireshark, Ettercap, tcpdump, etc), and it can parse it for files and information. You can easily search packets, and it tries to pick out passwords, but in this area, Cain is the best around.

Take Network Miner and Cain into school on a laptop, sniff your technincians PC (or, if you're feeling daring, redirect all the traffic going to/from the main gateway through your laptop, but this will lag you, slow the network down, and be very conspicous). You need winpcap installed, but that comes with Wireshark/Cain, so you should have it. Also seems to need .NET 2.0. Windows only, I'm afraid.

~muto

Code: Select all

http://networkminer.wiki.sourceforge.net/NetworkMiner

jd2kuk
Posts: 1537
Joined: Fri Mar 16, 2007 12:19 am
Location: UK

Re: [tool] Network Minder

Post by jd2kuk » Sun Mar 15, 2009 11:56 am

Nice! I think I may have to try this out... ;)
Some people are like Slinkies: completely useless but fun to watch when you push them down stairs.

Post Reply