Showing posts with label new release. Show all posts
Showing posts with label new release. Show all posts

Friday, May 8, 2020

NetScanTools Pro 11.91

Release 11.91 was posted on May 6 (installed) and May 7 (USB patch). It has fixes for Packet Flooder and Ping Scanner plus some improvements to Packet Player and PingTrend.

Packet Flooder. Ok, so over the last few months I had reports of the gauge and graph not working and also the new automatic flood mode not working. All reports were from outside the US. Clue #1 - non English Windows OS. By working with one of these customers I figured out why: performance counters are localized to the user's language. Oops. I was accessing three of them to populate the gauge and graph. I was using the English language names of the counters which did not exist in non-English OS's. So I changed it to access the counters by numerical index, then convert that index to the localized name and access the counter I needed by interface name. These are the same counters used in Performance Monitor and Task Manager (pdh.lib for you programmers).

Other fixes were minor but important and a new feature called 'Run Action' was added. This allows the normal run until stop is pressed and also allows a new timed mode where you specify how many seconds you want it to run.

Ping Scanner. The problem here was two-fold. If you scanned a range of IPs outside your subnet and had Do Local ARP Scan checked, it took a long time. And it could be a very long time. The software appeared to hang even though it was not hanging up. The 'SendArp' API function tries to send the ARP packet even though the target is not local - I consider that a flaw. That was fixed by making sure the target is local. The other problem was the Do SMB/NBNS - it would be very slow if your own IP address was in the IP range. Again, easily fixed by skipping your own IP.

Packet Player (found by going to Packet Generator and clicking the button in the lower right) has a new feature that repeats sending the packet stream indefinitely until Stop is pressed. However, note that the Stop button can only be polled after the current packet capture stream is sent. It also automatically loads the last selected packet capture stream into the display grid on startup.

PingTrend has a new checkbox for setting the DF (don't fragment) flag in the IP header. If you do that, be careful because if your data section size exceeds the MTU less the headers, nothing will be sent. I also increased the accuracy of the reported time between packets.

How to get 11.91. If you have an active maintenance plan you can download the 11.91 full installer or USB patch by clicking on Help menu/Check for New Version and following the instructions.

The maintenance plan is currently discounted. Click on Help menu/Maintenance Plan Renewal to see the new pricing.


Friday, February 9, 2018

NetScanTools Pro 11.84 Released Jan 25, 2018

The big news about release 11.84 is SMB Scanning. Back in May 2017 during Wannacry we had several people check out the Network Shares - SMB tool and ask if it scanned specific devices by IP address. It does not really do that since it uses only NetBIOS, so I set about to make a tool that does these things:
  1. connect to NetBIOS Name Service and grab the 'Windows computer name' and MAC address.
  2. connect to SMB port and test the SMB service for supported versions. Every supported version is shown.
  3. show latency.
  4. do this for a list of IPv4 addresses or hostnames. IPv6 will be added in a later version.

Here is an animated GIF showing the new SMB Scanner in action:


You can use the SMB Scanner Tool to see supported SMB versions and check for vulnerabilities based on those supported versions. It identifies SMB 1.0 support in red because we already know it is compromised. More about the SMB Scanner.

IPv6 improvements
Another important addition is the new multicast Ping button that helps you discover IPv6 neighbors in the Network Neighbors tool. What this button does is ping the link local multicast address and this forces neighbor discovery to happen. The results are then updated after 10 seconds showing all responding link local IPv6 neighbors.

How to get NetScanTools Pro 11.84
If you already have an active maintenance plan for NetScanTools Pro, click on Help/Check for New Version to login and download the full installer.


Friday, November 10, 2017

Managed Switch Port Mapping Tool v2.78 Released November 8, 2017

This release has one new function that has been requested by our users many times: the ability to export the results of a Switch List mapping to XML for easy opening in Microsoft Excel. Here is what it looks like when opened with Excel.


After mapping a Switch List, go to Review History, then select the Switch List and press Export Selected Switch List to XML.


While we are looking at Review History, another thing added in this release was searching of LLDP and CDP fields. See it below.


Those are two of the more important changes in v2.78. Here are all the changes. Download v2.78 from http://www.switchportmapper.com/download.htm

-New XML export option for Switch Lists from Review History. When the XML export is opened in Microsoft Excel, each switch results appear as a separate sheet. Each row in a multi-row port (ports with more than one mac address) are shown as separate rows in the XML output. Export progress is now shown on the bottom status bar.
-Review History/Searching now has selections for searching LLDP and CDP for text strings. Searching now defaults to 'Contains' if no options are selected and the search results shown in the right hand list are a bit wider. Search results are now shown in descending order - newest at the top. 'RecNo' in the two lists have been changed to 'No.".
-Corrected reporting of Switch Operational State for Extreme Networks switches.
-Corrected and removed '00 00' showing in Interface Alias column for Force10 switches.
-Warning is now shown if 10SCAPE export does find LLDP data for the switches. Switches with no reported LLDP data are shown. Export progress is now shown on the bottom status bar.
-Added new right click menu option to clear both the results grid and the Switch Info left control panel window.
-Improved parsing of MAC and IP addresses from LLDP data.
-Added Interface Manufacturer derived from remote MAC address in LLDP.
-Moved four tables from spmap database to working database.
-Updated SQLite to version 3.21.0

-Updated MAC address/Manufacturer database.


Wednesday, September 20, 2017

NetScanTools Pro 11.83 Released September 15, 2017

This release improves the user experience in several areas and the UI is less cluttered.

Back when we started adding tools that depended on WinPcap, a computer typically had one interface that WinPcap could use for receiving or sending packets. That has all changed. VPNs, Virtual Machines and secondary network interfaces can all potentially add WinPcap compatible interfaces and those interfaces all show up in the WinPcap Interface dropdown list. The problem is that prior to v11.83 you had to select the right WinPcap compatible interface or the tool did not work right and you saw a message to select the correct interface. What v11.83 brings is automatic selection of the interface based on the input you give. This applies to a number of tools in NetScanTools Pro like ARP Scanner, Ping, Traceroute and others. You will still have to select the correct interface in many of the separately launched tools like Packet Capture or Passive Discovery because those tools are listening tools rather than 'packet sending/listening' tools.

Over the past few years typical monitor sizes (pixels HxW) has radically increased. We originally designed NetScanTools Pro to accommodate monitors as low as 800x600 but I personally use a pair of 1920x1080 monitors. I reviewed our web traffic on Google Analytics and found that nobody is using 800x600 or even 1024x768 so this new version of NetScanTools Pro expands the layout of the buttons and other controls on the right side and spreads them out as a first step towards reducing clutter.

Another annoyance was the 169.254.x.x popup message that appeared on startup, usually if you had Npcap installed instead of WinPcap. The message is gone and 169.254.x.x interfaces are not included in any tool (except those that show interfaces) since they are auto-assigned IP addresses from the operating system and actually not functional.

Many other changes and they are listed below. If you have an active maintenance plan you can download 11.83 through the Help menu/Check for New Version.

The list of changes.

-Usability improvement: Tools that depend on selecting the right WinPcap compatible interface now automatically select the interface based on the target entered. This includes ARP Ping, ARP Scanner, DHCP Server Discovery, Duplicate IP Detection, OS Fingerprinting, Ping - Enhanced, Port Scanner, Promiscuous Mode Scanner, and Traceroute. 'Launched' monitoring tools still require you to select the interface to monitor.

-Reports now have expanded information regarding the settings used for these tools (most are in the 'Notes' section of the report): Packet Flooder, Ping - Enhanced, Ping Scanner, Port Scanner, and Traceroute.

-DHCP Server Discovery now times out quicker if the local port 68 is in use and any network adapters with the IP starting with 169.254.x.x are not shown in the list because they are inactive.

-Maintenance Plan Expiration and other startup messages that appear before the main window is active are now force to appear as the topmost window. This stops the problem of starting NetScanTools Pro and not seeing anything because a startup message window was behind another window.

-Ping Scanner now includes a right click menu option to use your web browser to connect with the selected IP address.

-Fixed minor memory leak in Network Interfaces and Statistics.

-Removed startup message about 169.254.x.x interfaces which shows up more frequently if Npcap is installed instead of WinPcap.

-Began the first steps of a UI improvement by expanding the area used by the tools in the right hand panel. Our research shows that most displays are now wide enough for us to de-clutter the right hand side by making it wider and moving controls.

-Ping: changed the default header acknowledgment field value to 0.

-Traceroute: added header acknowledgment field as a user defined field in Settings.

-SSL Certificate Scanner: Added parsing of Subject Alternative Name (SAN) fields. Shown in the certificate chain. Previous retrievals of SSL certificates are noted in the grid when you edit or start the software. Right click to access the certificate chain. Added more parsing of signature algorithms so OIDs will be less likely to show up.

-Graphical Traceroute: Added Reset Statistics button.

-SNMP and SNMP Advanced: default bulk reps is now 8. Suggest lowering to 8 if you are using SNMPv2c or SNMPv3.

-USB Version Only: startup on a host running Npcap now works correctly.

-Updated SQLite to version 3.20.1

-Updated MAC address/Manufacturer database.

-Updated IP to Country database.

-Updated dates in all subprograms to 2017.

Tuesday, September 5, 2017

Managed Switch Port Mapping Tools v2.77.1 released August 30, 2017

Version 2.77.1 followed closely behind the release of 2.77. This minor release adds serial and model retrieval from Adtran switches. It also fixes some minor issues with importing devices from a text file in Switch List editor. SQLite was updated as well.

Version 2.77 was a huge release.

Managed Switch Port Mapping Tool v2.77 adds several features to enhance the user experience plus new features including one that has been requested a number of times for several years.

One of the most requested features (for years) is this: a way to compare two mappings of the same switch to see what has changed. It is now there under Review History (left control panel):




Select at mapping from the left list, then select one from the right list. Press ‘Show Added & Removed’ to see a list of what is present only in the first mapping (green) and the second mapping (blue) as shown below.



To see a list of devices moved from one port to another between mappings, press Show Moved. The final port that the device was moved to is shown in the list.



Another major addition is the ‘Test’ button. You can find it in the device settings. It give you a way to see if the device (switch or router or other) can be pinged and communicated with using the SNMP settings you have entered. See below:



Do you have Juniper, Ubiquiti and Force10 switches? We improved support for those switches and we even found that some models of Adtran switches can be mapped – but not all.

Full list of changes in this revision.

2.77 August 18, 2017

-Added button in Review History for comparing and displaying the differences between two mappings of the same switch at different times. One selection shows the difference between information present on the first switch mapping vs the second switch mapping. The other selection shows movement of a device from one port to a new port. The results of the comparisons may be saved/exported/printed.


-Added Test button to Device Settings. Use it to verify the device is reachable with Ping and verify your SNMP settings are correct. It also can tell you if it is a switch or a different kind of SNMP enabled device.

-The target switch is now tested near the start of the mapping to see if it really is a switch, if not a 'do you want to continue' question is asked.

-Additional sources of warning messages during SNMP single parameter retrievals were identified and the warning suppressed. The warnings were sometimes interpreted by users as errors and slowed the mapping process.

-New Command Line option (-txt) to save the results of a mapping to a hybrid tab/CSV delimited text file. Columns are represented by tabs and rows within a multi-row cell are represented by commas.

-Improved export to 10SCAPE. If required columns are missing, a warning is now shown at export.

-Column Order and Visibility Editor: the 10SCAPE defaults button now turns off the Ping Sweep warning (see Global Settings to reactivate it).

-Global Settings: the Display Ping Sweep Not Configured warning message is now disabled by default.

-Global Settings: when switch group specific settings (like MAC limit per port) are changed, the changes are now saved to the currently shown left panel switch group.

-Switch List Editor: show final report and show individual reports are now unchecked by default.

-Framework: menu and toolbar are now fixed in place and not dockable.

-Framework: top titlebar is now correctly updated to show the switch info when the mapping is complete.

-Juniper, Force10 and Ubiquiti switches are now processed correctly and manufacturer specific details are now retrieved.

-Some models of Adtran switches are now supported.

-Juniper switches now show the vlan name, internal vlan number and vlan tag as follows with the tag in curly braces: MYVLAN(5){100}. Other switch brands will continue to show MYLAN(5) or 5 where 5 is the vlan number.

-In order to speed up the switch list mapping process, the column widths are no longer automatically resized in list mode.

-VLAN identification for older 3COM switches was improved.

-Improvements to data shown in vlan columns.

-Fixed SQL syntax problem in lldpLocChassisId when subtypes 1-7 are present.

-Fixed usability problem with device settings editor where selections from existing community names would not appear to 'stick'.

-Fixed XML export where switch information is added in the left column.

-Added System Description to CDP data.

-New information added to SNMP Error Report.

-Changed Review History icon.

-Updated SQLite to version 3.20.0

-Updated MAC address/Manufacturer database.

Download the ‘installed’ version 2.77 from SwitchPortMapper.com and install it over the top of your current installed version.


USB version users need to use the Help Menu/Check for Update selection to obtain the upgrade patch.

Thursday, August 11, 2016

NetScanTools Pro v11.80 released Aug 4, 2016

NetScanTools Pro 11.80 was released on Aug 4, 2016. This version was completely compiled on Windows 10 and is dual code-signed with both SHA256 and SHA1.

We added a new IPv6 Route Tool that displays the routes and many other properties.


There are many changes and the most obvious change is in the way WinPcap compatible interfaces are shown and selected. Tools that use WinPcap now have a much more verbose description of the interface, not just the IPv4 address shown before. Previously, users would occasionally run into problems where the IPv4 address shown in the dropdown list was not able to be opened even though WinPcap says it was compatible with it. The way the interfaces are opened based on the selection was significantly changed internally so there should be less chance of problems.


The Real Time Blacklist Check tool was changed from a text based single threaded (one after the other) output to a grid based output with multithreading. In other words, in v11.80 many RBL servers are queried simultaneously for the presence of the mail server IPv4 address in their databases.


SNMP tools now support SNMPv3 without the enduser having to go obtain libeay32.dll. We have an Encryption Registration Number and the software is ECCN 5D992.c.

The SNMP Scanner and SNMP Dictionary Attack Tools were worked on extensively to fix problems that happened if you sorted a column with scanning (no longer allowed) and also problems with the XML Excel Schema. Side note - if you are using Excel, don't 'import' the XML file, simply 'open' it just like any other Excel file.

Here are the specific changes:
-Compiled on Windows 10.
-New Tool: IPv6 Routing Table.
-Significant change to the way WinPcap compatible interfaces are listed and chosen. Layout of some tools had to change to support longer selection box.Opening and using a WinPcap network interface no longer depends on matching the IPv4 address.
-We now test to verify that the official WinPcap service or the alternative npcap or Win10Pcap services are running.
-Realtime Black List Check tool completely rewritten with new user interface and it is now multithreaded for increased speed.
-SNMP Core and Advanced tools now have simplified SNMPv3 options. SNMP DLL now has libeay32.dll added and SNMP Library Manager was removed. ECCN 5D992.c
-SNMP Scanner, SNMP Dictionary Attack and Protected Storage Viewer have updated grid controls and are now prevented from sorting by clicking on the column header while the tool is working. Exporting with Microsoft Excel schema has been updated - simply 'open' the XML file from Excel (do not import it). SNMP v1+v2c setting is now properly saved.
-ARP based tools now confirm that the target IPv4 addresses are within the same subnet as the chosen WinPcap interface.
-ARP Scan now automatically sorts by the IP address column when complete.
-Whois changed so that if whois server does not respond, it times out and automatically stops.
-Assigned IPv6 Teredo server is shown in IPv6 Compatible Interfaces.
-Corrected privilege problems with writing to certain parts of the registry during registration process.
-Updated SQLite to version 3.13.0
-Updated MAC address/Manufacturer database.
-Updated IP to Country database.
-Code signing now uses both SHA256 and SHA1 for maximum operating system portability.

Thursday, June 2, 2016

NetScanTools Pro 11.75 Released May 6, 2016

This is a minor release - kind of - it has numerous changes to the Packet Flooder to increase speed and give the user finer control over packet sending.

We also did something that was long overdue. We changed from the ancient Wise installer to the most recent Inno Setup installer for the 'installed' version.

SQLite was updated along with the databases and in order to be used on Windows 10, we codesigned everything with both an SHA256 certificate and an SHA1 certificate.

If your maintenance plan is active, please click on Help menu, then Check for New Version. The embedded window will appear with links for downloading. You will need your access credentials.

Full list of changes is here: http://www.netscantools.com/nstpronews.html

Wednesday, March 23, 2016

Managed Switch Port Mapping Tool v2.63 released on Friday, March 18, 2016

The v2.63 release has one major change dealing with IEEE 802.3ad LAG (Link Aggregation) ports. If your switch reports these ports in the type column as ieee8023adLag(161) AND you have assigned other ports to be members of the LAG, it will show something like ieee8023adLag(161): fa1, fa2 where fa1 and fa2 are the ifNames of the ports comprising the LAG. Click on the image below.










Another change in the message you see when the switch or other device does not respond to SNMP. We had a user accidentally change his SNMP port from 161 to 10. If SNMP times out and the port is not 161, you are told that the most likely cause is the port being wrong.

Like all versions released since Jan 1, 2016, we are code signing the executables and the installer with both SHA1 signed certificates and SHA256 signing. The ensures that the authorship of the software will be recognized across all current versions of Windows.

Download the installed trial of Managed Switch Port Mapping Tool v2.63 for Windows from http://www.SwitchPortMapper.com/



Tuesday, September 8, 2015

Managed Switch Port Mapping Tool v2.55 released

On Friday, Sept 4 we released version 2.55 of the Managed Switch Port Mapping Tool. It improves the wording on new dialogs introduced in v2.54. It also adds a new Used Ports section to the webpage reports.

If you have the installed version, click on Help/Check for Update or visit http://www.switchportmapper.com/ to download v2.55. If you have the USB version, click Help/Check for Update to for a link to the upgrade patch.

Monday, June 15, 2015

NetScanTools Pro v11.70 released on Friday, June 12, 2015

Version 11.70 was long overdue but we made many changes and added a new tool called the DNS Traffic Monitor. This new tool shows you the percentage of query allocations or loading experienced by each default DNS assigned to your system. It also shows you any outgoing DNS queries to DNS that are not in your default list.



This release completes the transition of moving all the code to VC2012. The next move will be to VC2015 when it is finally released. All development has now been transitioned to Windows 8.1. It may be one of the last releases to support Windows XP.

Additionally, each separately launched tool has been changed to conform to a new look and feel. The DNS Traffic Monitor is one example of the look - here are a couple others:

Passive Discovery

SNMP Scanner
 
The demo version will be updated to 11.70 soon. If you have an active maintenance plan you can get 11.70 by clicking on Help/Check for New Version.

Wednesday, May 13, 2015

Managed Switch Port Mapping Tool v2.52 Released on May 11, 2015

We've had some occasional problems with strange (non-printable) characters appearing in the CDP and LLDP fields - it was thought to have been fixed in a previous release but apparently not, so we addressed that in this release. Those non-printable characters occasionally included apostrophes or double quotes which completely messed up (technical term) the SQL commands, so an SQLite database error popped up. In LLDP you will now always see hex characters in the MAC Address and Network Address fields and in CDP 'Port (ifName) and Device ID will either show a printable string or hex characters - both are valid.

We also changed LLDP and CDP retrieval phases to be more responsive to user input.

Speaking of strange, non-printable characters, the new SNMP Walk Tool used for support would also occasionally show strange characters. That has been fixed too.

More minor report changes and we updated also SQLite to the latest version along with the MAC address/manufacturer database.

Please visit www.SwitchPortMapper.com to download this new release.

By the way, this version works on Windows 10 Preview 10074.

Kirk

Monday, March 9, 2015

NetScanTools LE v1.52 Released on March 6, 2015

The latest release of NetScanTools LE (designed for Law Enforcement) was ready on March 6, 2015.

Version 1.52 makes operational changes to Port Scanner/Scan Common Ports to scan only the current protocol type selected, ie. TCP, UDP or TCP+UDP. Previous versions scanned using the whole list, TCP+UDP regardless of the selection.

Whois has improved support for IPv6 and the ability to get whois information for the new top level domains was greatly expanded.

We tested it on Windows 10 Enterprise version. Everything operated normally as far as we could see.

WinPcap: only one part of NetScanTools LE uses WinPcap - the Packet Capture Tool. Due to recent issues customers have had with WinPcap on Windows 8.1, we decided to add in a test to make sure WinPcap is installed and running. If npf.sys is not running you will not be able to launch the Packet Capture Tool.

We updated SQLite to v3.8.8.3 and also updated the database files.

Please visit http://www.netscantools-le.com/ to get the latest version. You may install it over previous versions.

Thursday, January 29, 2015

Managed Switch Port Mapping Tool v2.42 released on January 22, 2014

A few days after releasing 2.41 I found out that if you start the Switch Port Mapper with an empty history database (as a new user would), you would see this error message "SQLITE_ERROR[1]: duplicate column name: voiceVlan". This was due to a problem in the creation of the new Voice VLAN column introduced in 2.41. It worked fine if you already had data in the history database.

Version 2.42 corrects this - new trial users take note! We also took the opportunity to update SQLite to version 3.8.8.1 and update the MAC address to manufacturer database.

Please upgrade to v2.42 by clicking Help/Check for Update or by visiting http://www.SwitchPortMapper.com/

Kirk

Thursday, January 15, 2015

Managed Switch Port Mapping Tool v2.41 Released

Managed Switch Port Mapping Tool Version 2.41 was released on January 14, 2015.

This is an important upgrade if you use this software with Cisco Switches. There are two changes you need to be aware of: First, we improved VLAN reporting for unused ports on Cisco switches. Secondly, we added a new optional Voice VLAN column that currently supports Cisco switches only - because this column is new you will have to go into Settings and Tools/Column Order and Visibility Editor to add the column and to put the columns back to your personal preference - we had to reset the order to add the new column. Changes were made to better support Enterasys switches.

Please use Help/Check for Update or download from SwitchPortMapper.com and install over your current 2.x. The USB version patch will be ready very soon.

http://www.SwitchPortMapper.com/
 

Friday, January 2, 2015

NetScanTools Pro v11.63 released on December 9, 2014

This release had improvements in three areas:
1. Packet Generator. Mostly in the Packet Player (button is on lower right section of Packet Generator window) - it now saves the paths to recent packet captures you have played previously and there is now a status window. Be aware that once you start a playback you cannot stop it. TCP, UDP, ICMP, and RAW manual packet definition windows now show the length of the data portion of the payload and it now makes a definite check against the actual MTU of the sending interface.
2. SSL Certificate Scanner. The SSLv3 POODLE vulnerability issue is now addressed by showing you new columns with connection types SSLv2 through TLS 1.2. The server you are connecting to is tested to see if it accepts all types and the results are displayed in the new columns.
3. SNMP Core and Advanced have some changes including buttons to go between the two tools rapidly and improvements to the OID selector.

If you have an active maintenance plan you can click on Help/Check for New Version. The links to download the software are in the embedded IE window on the right side of the program. The installed version has a full installation and the USB version uses a patch.

Enjoy!
Kirk

Thursday, August 28, 2014

NetScanTools Pro v11.62 Released August 15, 2014

This release added the new IPv6 Syntax Validation tool (thanks go to Jeff Carrell for all his help!), consolidated the currently IPv6 capable tools into one menu bar link and addressed the way the top and left panel menus look on High-DPI displays (3200x1800).

It also added the ability to properly send packets to IPv4 multicast addresses when WinPcap is used to send the packets. Prior software versions did not use the correct destination mac address. And now you can also use new scripting commands to specify the source and destination mac addresses in Packet Generator.

One important fix was a change to the way responding ARP packets are processed in the ARP Scanner and Duplicate IP Scanner tools: it now only processes packets with IP addresses corresponding to the allowed range that you specified. Prior versions would show IPv4 addresses outside the range giving uncertain or hard to interpret results.

If you have an active maintenance plan, please click on Help/Check for New Version to download the full install or USB upgrade patch.

Friday, May 30, 2014

NetScanTools Pro v11.61 Released May 9, 2014

This release fixed an urgent algorithm problem in the Whois tool that was introduced in v11.60. And we added 50 new top level domain Whois servers in addition to the 180+ added in v11.60 – the IANA has been busy. This includes servers for new TLDs like ‘.wtf’ and ‘.fail’.

Another minor change is that the DNS entry boxes labeled ‘DNS Server’ now all accept up to 48 entries. Some were only accepting 16 before old entries would age out of the list. As usual, the other databases were all updated.

Users with active maintenance plans can click on Help/Check for New Version for update instructions.

Wednesday, April 16, 2014

NetScanTools Pro v11.60 Released April 10, 2014

NetScanTools Pro v11.60 (installed version) was released on April 10, 2014. It adds a new tool called Graphical Traceroute and significantly updates the SSL Certificate Scanner. It also marks the beginning of the changeover from compiling with VC2008 on Windows XP to VC2012 on Windows 8.1. We will still support XP at least through the end of 2014.

Graphical Traceroute (found under Manual Tools/Traceroute - Graphical) is similar to an old command line utility called MTR, but with some important differences: it was written from the ground up before I even knew about MTR to support both IPv4 and IPv6. It has a graph that shows hops vs. response time with minimum, maximum, average and last traces shown. There is also a list view showing more stats like dropped packets. Exporting to files is supported and you can print the graph too. To use it, simply put in a target and press Run. It will run until you stop it. You can control some packet parameters and how long to wait between doing traces. Here is what it looks like:


SSL Certificate Scanner was enhanced to add retrieval of the whole certificate chain up to and including the root certificate for each target - we also now show you whether the certificate is valid. You can now view those certificates and export the details to a text file. In this image we are showing the certificate chain for Google:



We also added over 180 new Whois domain servers for the many new top level domains the IANA has approved. Whois also now has a minor algorithm change to handle new TLDs too. This is an important addition that will eventually prove useful as people begin to register domains in those new TLDs.

These are the other changes:
-Added test for a security program known to block access to the clipboard preventing copying and pasting in NetScanTools Pro.
-Wording changes for the controls in Packet Capture.
-Updated SQLite to 3.8.4.3
-Updated database files.

How to get v11.60:
If you have an active version 11 maintenance plan you can click on Help/Check for New Version to login and download the full install.

The USB version patch will be ready on or before April 18.

Friday, April 4, 2014

Managed Switch Port Mapping Tool 2.32 Released

Two releases of the Switch Port Mapper were done quickly on the heels of v2.30 - the reason was to address issues with SQLITE_BUSY messages seen by some users (but never by us). It occurs during a SELECT of one table and using some of the data from that SELECT to do an INSERT into a different table - same database file. By doing a BEGIN IMMEDIATE wrapping the statements, I was able to solve the problem. It didn't used to happen so it must be a change in SQLITE operation.

I also added in a message to tell the user when Ping Sweep is activate but the IP range for Ping Sweep is empty. That's important because if you want to use Ping Sweep to prepopulate arp tables or to get NetBIOS info from a set of target, you had better define the targets. Why is this needed? simple: most people are using the Switch Port Mapper to map Layer 2 switches that don't keep track of IPs, layer 2's keep track of MAC addresses. So you have to get the IPs by retrieving ARP tables and looking for the MAC addresses so you can work backwards and get the IP addresses.

Get Managed Switch Port Mapping Tool v2.32 here:
http://www.SwitchPortMapper.com/

Tuesday, March 4, 2014

Managed Switch Port Mapping Tool v2.30 released Feb 26, 2014

Release v2.30 makes major changes to the way Ping Sweep operates. It now allows you to specify an IP range or ranges to ping on a per switch basis. This means you can set the range of IPs to match those handled by the switch. You can also now specify the timeout and retries for the ping packets. Responding IPs are queried for their MAC address and the results are placed in our Combined ARP table for use during the mapping process.

There is also a terminology change: previous versions all referred to Switch Configurations which are the combination of a switch and the two optional devices to query for ARP information. Now that term has been changed to Switch Group in order to reduce confusion with Cisco switch configs.

There are several other changes and the SQLite DLL was updated to the latest version 3.8.3.1.