Monitoring - Network Monitor shows detailed
listings of all TCP and UDP endpoints, including the
owning process name and details, remote address and state
of TCP connections, as well as the host dns name, country,
network class, appropriate service name and service
Network Auditor is a tool to discover the network
services and to check them for discovering well known
vulnerabilities.This tool creates an audit report.
Auditor - NetBios Auditor is a tool to discover
NetBios names . NetBios names are the names of the
Services and Machines. NetBIOS Scanner is a powerful and a
fast tool for exploring networks and scanning a network
within a given range of IP addresses and listing computers
which offer NetBIOS resource sharing service as well as
their name tables and netbios connections.
Scanner - Network Scanner is a tool that detects if
certain TCP/UDP ports are open and can accept connections.
TCP scanners are usually used to check if the remote
computer runs services. A port scanner consists of sending
messages to the user-defined port list, and the kind of
response received indicates whether the ports are open.
The Port Scanner has the following scan modes: connect
scan, SYN stealth, FIN stealth, Ping sweep, UDP scan, NULL
scan, XMAS tree, IP protocol scan, ACK scan.
System OS detector - Remote OS detector is based on
using well known TCP, UDP, ICMP packet probes and using
the available OS fingerprints.
Proxy Scanner - Web proxy scanner is a tool to
check the vulnerabilities of web servers( this scanner can
work as a port scanner if Check CGI Vulnerabilities is not
enabled).CGI probes are sent against web servers. The tool
provides an ability to turn them off and if the user is
running an audit from a proxy server, he/she can configure
the scanner to run CGI probes through that proxy.
SQL Server Auditor - This tool allows to perform
an audit on a machine running MS SQL server.
auditor - The SNMP auditor is a tool that allows
to walk through all SNMP MIBs of your nodes and to audit
SNMP community names using values stored in xml database.
RPC Auditor - Audit MSRPC, is a Microsoft
implementation of DCE RPC. The auditor dump is a list of
named pipes that are used by Windows RPC services as
endpoints. The interface identifier associated with each
named pipe represents the service typically accessed when
a given named pipe is used.
RPC Auditor - Audit Sun RPC uses ONCRPC (Sun RPC)
protocols to access the Portmapper daemon/service that
typically runs on port 111 of UNIX or Linux machines.This
tool includes a portmapper to dump where a list of all
running registered daemons are shown.
Filter (the protocols count will be enhanced in next
realizes) - The Packet Filter provides a
real-time network packet filtering and analyzing. It
filters the packet by all IP, ICMP, TCP, UDP, NETBIOS-SSN
packet header fields.
Spider - LM/NTLM Spider is a password audit and
Detection System based on security Events analyzer - Nsauditor
Have incrusted intrusion detection system based on
Security Event Log analyzing. Security Event Log Monitor
monitors the security event logs of Windows NT/2000/XP
servers or workstations and alerts the possible
intrusions/attacks using E-mail, Net Send, Speech Recognition
method or playing user selected voice file.
Editor (the protocols count will be enhanced in next
realizes) The Packet Editor is a tool to decode
IP, ICMP, TCP, UDP, NETBIOS-SSN packets.
horses or backdoor software Detector -
Port scanner will list all open ports. If the port is a
well-known Trojan port, it will be displayed in RED.
Alerts when IP Address Table or Routing Table are
changed using E-mail, Net Send, Speech Recognition method
or Playing User selected voice file.
Ping is a tool that provides an opportunity to verify
that the specified IP address exists. This tool is used to
ensure that a host you are trying to reach is accessible.
Ping also can be used with the host that is reachable to
see how long it takes to get the response back. Also you
can get information about the operating system of remote
Route - TraceRoute is a tool that traces the
route (the specific gateway computers at each hop) from a
client machine to the remote host being contacted by
reporting all the router IP addresses in between. It also
calculates and displays the amount of time each hop took.
TraceRoute is a handy tool for both understanding where
problems exist in the Internet network and for getting a
detailed sense of the Internet itself.
Lookup - DNS lookup converts IP addresses to
hostnames and vice versa and obtain aliases. DNS lookup
perform advanced DNS queries, such as MX or CNAME. Full
list of queries are A, NS, MD, MF, CNAME, SOA, MB, MG, MR,
NULL, WKS, PTR, HINFO, MINFO,MX,TXT,AXFR,MAILB,MAILA,*.DNS
Lookup supports checking if the host is in a Real-time
Black list for spammers â€œRBL â€œ.
This tool will lookup information on a domain, IP
address, or a name. You can select a specific WhoIs
Server, or you can use the 'Default' option to use the
- Finger is the tool for discovering user information
by using well known finger service. Using Finger tool
makes possible to get of remote host. For example to get
the abuse address of prontomail.com you should type
email@example.com in the finger input section. As a
result you will receive firstname.lastname@example.org (for
prontomail.com) in the finger response section.
Validate - The Email Validate Tool is a client
utility for checking the validity of an email account.
Computers - Enumerate computers is a tool to
enumerate computers in a domain.
Client/Server/Port Redirector - This is a useful
tool for testing some services, firewall and intrusion
detection systems. This tool also can be used for
debugging the program and configuring other network tools.
IP, TCP, UDP and ICMP statistics - This tools
shows the IP, TCP, UDP and ICMP statistics. Analyzing this
statistics allows the detection of different kinds of
network treatments as well port scanning probes and
Routing, Net Table - IP Tables provides the tool
to retrieve information releated interface IP address
mapping table, IP routing table, IP-to-physical address
mapping table. This tool shows the details about each IP
address in the table. The each part of the table contains
information about IP address including address, interface
index, subnet mask, broadcast address, reasm size.
Addressing information table - This tool shows
the available network interfaces and their IP addresses,
Network Mask, Broadcast addresses, PPP, Multicast and
Net to media information table - This tool shows
the available network adapters and their MAC address,
Subnet mask, Gateways, DNS servers, WINS servers, DHSPs,
interface names and other useful information.
Monitor - Process Monitor is a tool to display
the list of the processes currently running on computer
and shows the program name, the unique process ID, full
path to the program's executable file, name of the file
manufacturer, and the name of modules and kernel objects
used by the selected process.
Country - IP/ISN is a tool to determine which
country an IP address or autonomous system number is
assigned to . This tool supports two ways to find the
country; searching by IP address or autonomous system