Re: Nirsoft Smartsniff not really doing much anymore

B. R. 'BeAr' Ederson wrote:
> John C. wrote:
>> B. R. 'BeAr' Ederson wrote:
>>> John C. wrote:
>>>>
>>>> Ever since I "updated" to Windows 10 (which I have nothing but the
>>>> utmost hatred for), Nirsoft's Smartsniff doesn't really do much anymore.
>>>
>>> I'd guess, you run the 32 bit version of SmartSniff on Win10 x64. 
>>> Use the x64 version of SmartSniff instead.
>>
>> No, I'm using the 64 bit version of the program. My copy of Windows 7
>> was 64 bit. I always download 64 bit versions of programs if they're
>> available.
> 
> You checked, that no unwanted capture and/or display filters are set?
> What's the outcome when you switch source from PCAP to Network Monitor
> Driver?

BeAr, first of all, thanks very much for taking the time to reply. I
really appreciate your help.

I did have a capture filter set, carried over from Windows 7. I just
removed it. Sorry, but I forget what it was.

As I mentioned in the OP, I have Npcap (https://npcap.com/) installed
and use that. These two options in the "Capture Options" window are
grayed out, probably as a result of that:

Network Monitor Driver
Network Monitor Driver 3.x

At the program's home page:

http://www.nirsoft.net/utils/smsniff.html

Nir Sofer says the following:

_______________________________________________________________________
SmartSniff provides 3 methods for capturing TCP/IP packets :

1. Raw Sockets (Only for Windows 2000/XP or greater): Allows you to
capture TCP/IP packets on your network without installing a capture
driver. This method has some limitations and problems.

2. WinPcap Capture Driver: Allows you to capture TCP/IP packets on all
Windows operating systems. (Windows 98/ME/NT/2000/XP/2003/Vista) In
order to use it, you have to download and install WinPcap Capture Driver
from this Web site. (WinPcap is a free open-source capture driver.)

(WinPcap is no longer being developed and its home page
[https://www.winpcap.org/default.htm] says to download the Npcap driver
I mention above instead.)

3. Microsoft Network Monitor Driver (Only for Windows 2000/XP/2003):
Microsoft provides a free capture driver under Windows 2000/XP/2003 that
can be used by SmartSniff, but this driver is _not installed by default,
and you have to manually install it_, by using one of the following options:

Option 1: Install it from the CD-ROM of Windows 2000/XP according to the
instructions in Microsoft Web site

Option 2 (XP Only) : Download and install the Windows XP Service Pack 2
Support Tools. One of the tools in this package is netcap.exe. When you
run this tool in the first time, the Network Monitor Driver will
automatically be installed on your system.

Microsoft Network Monitor Driver 3: Microsoft provides a new version of
Microsoft Network Monitor driver (3.x) that is also supported under
Windows 7/Vista/2008. Starting from version 1.60, SmartSniff can use
this driver to capture the network traffic.

The new version of Microsoft Network Monitor (3.x) is available to
download from Microsoft Web site
(http://www.microsoft.com/downloads/details.aspx?FamilyID=983b941d-06cb-4658-b7f6-3088333d062f&displaylang=en)."
________________________________________________________________________

When I tried to get the MS Network Monitor driver by clicking on the
link immediately above, I got a 404:

"We're sorry, this download is no longer available.
Perhaps one of the following links will help you find what you need."

Since the last time SmartSniff was updated was 2018 and Sofer hasn't
changed the website to reflect that WinPcap is no longer the driver of
choice as well as MS's Network Monitor Driver is no longer available
(and might not even work with Windows 10), perhaps it's time to move on
to another program.

Some interesting looking free ones are listed here:

https://thectoclub.com/tools/best-packet-sniffer/

-- 
John C. No ad, CD, cripple, demo, nag, pay, pirated, share, spy,
time-limited, trial or web wares for me please.

So that I don't see them, I filter out crossposts (messages sent to
multiple newsgroups at a time) and from various trolls. If you do the
same, the group will be easier for you to read.