NetworkMiner 1.2 发布,网络取证分析工具

来源: OSCHINA
编辑: 红薯
2011-11-22

NetworkMiner是一款windows平台下开放源代码的网络取证分析工具,同时也是一款比较好的协议分析工具,它通过数据包嗅探或解析PCAP 文件能够检测操作系统,主机名和网络主机开放的端口。NetworkMiner还能够从网络通信中提取文件。

目前  NetworkMiner更新至1.2版,新版主要改变如下:

    * NetworkMiner is now platform independent and can be run on Linux, Mac etc. with help of Mono.
    * Better parsing of emails sent with SMTP.
    * Content extraction of emails went with AOL webmail as in ”The L33t Pill” from the Network Forensics Puzzle Contest.
    * Content extraction from unencrypted SquirrelMail webmail posts.
    * Content extraction of comments sent to WordPress and Blogspot blogs.
    * Support for GRE encapsulation.
    * Better handling of truncated pcap files that are cut in the middle of a frame.
    * Updated “Details” column in “Files” tab to display the HTTP host name as well as the URI from where the file was retrieved.

展开阅读全文
4 收藏
分享
加载中
更多评论
0 评论
4 收藏
分享
返回顶部
顶部