Info on windump- one utility which can be used to analyze networking processes by CC16

Monday, September 21, 2009

WINDUMP

WinDump is the Windows version of tcpdump, the command line network analyzer for UNIX. WinDump is fully compatible with tcpdump and can be used to watch, diagnose and save to disk network traffic according to various complex rules. It can run under Windows 95, 98, ME, NT, 2000, XP, 2003 and Vista.

WinDump captures using the WinPcap library and drivers, which are freely downloadable from the WinPcap.org website. WinDump supports 802.11b/g wireless capture and troubleshooting through the CACE Technologies AirPcap adapter.

BEST FEATURE IS WinDump is FREE

Software requirement:

  • Microsoft Visual C++ compiler, at least version 6.0.
  • You need to have the Microsoft Platform SDK installed and registered within Visual Studio 6. The Platform SDK contains some defnintions required to compile WinDump properly
    More details on where to find the Platform SDK can be found in section "compiling wpcap.dll" in the WinPcap documentation (see http://www.winpcap.org/docs/).

  • The winpcap source tree must be in the same directory of the windump source tree

In order to compile WinDump, you need to have a directory structure like this

windump <-- WinDump sources
winpcap <-- Winpcap sources

In particular, the winpcap sources folder should be named exactly "winpcap".

Project files are in the directory windump\win32\prj of the WinDump source code distribution. Load the project from the Visual C++ 6.0 IDE and build the program. The release version of the WinDump.exe executable file will be generated in the directory windump\win32\prj\release. The debug version of the executable file will be generated in the directory windump\win32\prj\debug.

The project can be compiled indifferently under any Win32 platform. The executable file generated is system-independent.


Submitted by: CC16

Satchidanand Das

Priya M.S.

Darshan Thappa.

Karthik K.

0 comments:

Post a Comment