Part Sniffer, part Screensaver
Page 1 of 2 12 LastLast
Results 1 to 10 of 13

Thread: Part Sniffer, part Screensaver

  1. #1
    King Tutorial-ankhamun
    Join Date
    Jul 2004
    Posts
    897

    Part Sniffer, part Screensaver

    Ok, I started last night so this is pretty basic. I wrote a quick screensaver in VB that uses a WinPcap wrapper (http://www.lorenzocerulli.tk/) and bounces packets around the screen. It does not support multiple screens yet, anyone know of how I can manage that? Iím not sure how to find out how many monitors someone has, and how they are oriented, once I have that itís no problem. Anyway, the source is included, along with the binary.

  2. #2
    Elite Hacker
    Join Date
    Mar 2003
    Posts
    1,407
    I don't have any applications for looking at the vb source. But I ran the screensaver and all I got was a url to your site bouncing around. Does that just mean I didn't have any packets being sent or received?

  3. #3
    King Tutorial-ankhamun
    Join Date
    Jul 2004
    Posts
    897
    Oh, go into the config and choose a network card. LEt me know if that fixes it or not.

  4. #4
    Elite Hacker
    Join Date
    Mar 2003
    Posts
    1,407
    what config? That may be it though, because I have wireless and a normal ethernet card on here. So maybe it's trying to use the normal ethernet card while I'm on wireless. But I don't know what config you're talking about. If it's something from the source I don't know how I can change that.

    edit
    oh, it was in the settings. And the correct one was chosen. Does it use promiscuous mode? because I don't think my wireless card supports that. Maybe later I'll go back to wired and try it with that.

  5. #5
    Senior Member
    Join Date
    Oct 2002
    Posts
    1,130
    Hey Irongeek,

    This may be obvious, but all I get is "cannot find VBPCAP.DLL", or something close to that. I have copied this file to C:\WINNT and C:\WINNT\SYSTEM32, as well as the netscr.scr file to both of those locations, to no avail. This is a fresh Win2000 copy I installed just this morning. I unfortunately have no way to inspect VB source either right now. What am I missing?
    Government is like fire - a handy servant, but a dangerous master - George Washington
    Government is not reason, it is not eloquence - it is force. - George Washington.

    Join the UnError community!

  6. #6
    King Tutorial-ankhamun
    Join Date
    Jul 2004
    Posts
    897
    Striek, you will also need winpcap installed:
    http://winpcap.polito.it/


    h3r3tic, I'm not sure why it's mpt working on yours, but yes it does use promiscuous mode (or slutty mode as I like to call it).

  7. #7
    Senior Member
    Join Date
    Oct 2002
    Posts
    1,130
    Amazing! This would be great on a server or firewall station, to give an overview of traffic passing through it.

    If I may make a suggestion, I'd like to see it include information on which protocols are being used, and instead of printing out every packet, match packets to previous traffic and display summaries instead.

    This has some amazing potential I think.

    Excellent idea Irongeek!
    Government is like fire - a handy servant, but a dangerous master - George Washington
    Government is not reason, it is not eloquence - it is force. - George Washington.

    Join the UnError community!

  8. #8
    King Tutorial-ankhamun
    Join Date
    Jul 2004
    Posts
    897
    To bad I'm not very good with graphics, I wanted to do a kind of Matrix effect with it. Maybe something like what Etherape does but with rotating nodes?

    /edit:by the way, a lot of the code for decoding came from the YANA project at http://www.lorenzocerulli.tk/ . Just wanted to give them credit.

  9. #9
    King Tutorial-ankhamun
    Join Date
    Jul 2004
    Posts
    897
    Ok, I made a better version with a readme.txt.


    Steps to install:

    1. copy ./bin/netscr.scr to windows directory (c:\windows\).
    2. copy ./bin/ VBPCAP.DLL to windows\system32 directory (c:\windows\system32).
    3. Install Winpcap from http://winpcap.polito.it/ .
    4. Go to Display Properties->Screen Saver and choose netscr.
    5. Click the settings button and choose your network card and speed.

  10. #10
    King Tutorial-ankhamun
    Join Date
    Jul 2004
    Posts
    897
    I renamed it PacketFountain and posted a webpage here:

    http://www.irongeek.com/i.php?page=s...packetfountain

    It now supports more than one screen.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides