Friday, January 2, 2015

NetScanTools Pro v11.63 released on December 9, 2014

This release had improvements in three areas:
1. Packet Generator. Mostly in the Packet Player (button is on lower right section of Packet Generator window) - it now saves the paths to recent packet captures you have played previously and there is now a status window. Be aware that once you start a playback you cannot stop it. TCP, UDP, ICMP, and RAW manual packet definition windows now show the length of the data portion of the payload and it now makes a definite check against the actual MTU of the sending interface.
2. SSL Certificate Scanner. The SSLv3 POODLE vulnerability issue is now addressed by showing you new columns with connection types SSLv2 through TLS 1.2. The server you are connecting to is tested to see if it accepts all types and the results are displayed in the new columns.
3. SNMP Core and Advanced have some changes including buttons to go between the two tools rapidly and improvements to the OID selector.

If you have an active maintenance plan you can click on Help/Check for New Version. The links to download the software are in the embedded IE window on the right side of the program. The installed version has a full installation and the USB version uses a patch.

Enjoy!
Kirk

Happy New Year!

Happy New Year!

My New Years Resolution is to post more often on this blog. I haven't posted since August, so I'm going to do a couple posts today.

Thursday, August 28, 2014

NetScanTools Pro v11.62 Released August 15, 2014

This release added the new IPv6 Syntax Validation tool (thanks go to Jeff Carrell for all his help!), consolidated the currently IPv6 capable tools into one menu bar link and addressed the way the top and left panel menus look on High-DPI displays (3200x1800).

It also added the ability to properly send packets to IPv4 multicast addresses when WinPcap is used to send the packets. Prior software versions did not use the correct destination mac address. And now you can also use new scripting commands to specify the source and destination mac addresses in Packet Generator.

One important fix was a change to the way responding ARP packets are processed in the ARP Scanner and Duplicate IP Scanner tools: it now only processes packets with IP addresses corresponding to the allowed range that you specified. Prior versions would show IPv4 addresses outside the range giving uncertain or hard to interpret results.

If you have an active maintenance plan, please click on Help/Check for New Version to download the full install or USB upgrade patch.

Switch Port Mapper Tip

Applies to all v1.x through 2.34:

If you use the menu item Settings and Tools/Column Order and Visibility Editor to add/remove columns or change where they appear, be sure to keep the Interface Index (ifIndex) column visible.

In other words, if you remove the ifIndex column some other columns may not show data you expect to see. The next release will not allow you to remove the ifIndex column.

Monday, June 2, 2014

How to start NetScanTools Pro USB version 11

We are changing our recommendations for starting NetScanTools Pro v11 USB version. These recommendations apply to Windows Vista, 7 and 8.x.

First recommendation:
Located in the root directory above /nstpro is a file called nstprolaunch.exe. We no longer recommend using it to start NetScanTools Pro - do not use it because the privileges you launch it with may not be correctly passed along to NetScanTools Pro.

There are two recommended ways to start NetScanTools Pro v11.x:

1. If you have WinPcap 4.1.3 (or newer) installed on your host computer, please locate and double click on nstpro.exe which is in the /nstpro directory on the USB drive.

2. If WinPcap 4.x is NOT installed on the host computer, please locate and right click on nstpro.exe, then select 'Run as administrator'. nstpro.exe is located in the /nstpro directory on the USB drive. This will use an older version 4.1.2 of WinPcap Pro located on the USB drive. We recommend going to winpcap.org and installing 4.1.3.

Discussion: if you use nstprolaunch.exe, you may see error messages that say "Error: unable to locate a supported network interface. WinPcap may not be operating... PacketGetAdapterNames: Incorrect function. (1)"

We are moving toward requiring installation of WinPcap 4.1.3 on hosts that you intend to use NetScanTools Pro USB Version just like Wireshark requires WinPcap to be installed.

Friday, May 30, 2014

My take on the Truecrypt situation

I've used Truecrypt a fair amount in the past, but never to encrypt a whole drive. I've used it to store private things in an unmarked file before. I know there is wild speculation about what may have happened and the end of life of Windows XP seems like a convenient excuse. I lean more towards the developer(s) getting tired of it and wanting to move on. After all it's been out for 10 years and they are not getting paid for it.

But there are strange things happening - like the endorsement of bitlocker. Even more strange is the wayback machine people excluding truecrypt.org from their database. Here's what you see:

Sorry.

This URL has been excluded from the Wayback Machine.

Why should Wayback care about a site like truecrypt.org unless someone told them to erase it or are they simply being overloaded with too many queries? Just a thought.

There are calls to fork the development. Legal issues with a fork aside, this effort looks very promising: http://truecrypt.ch/  (It appears that they may be using bootstrap too. Our sites will all be using bootstrap soon.)

I agree with Steve Gibson - continue using it until it's proven to have a severe problem and I guess we will see what happens after the crowd funded code audit is finished. Mr Gibson has kindly posted the 7.1a Windows and Linux installers and source code here:
https://www.grc.com/misc/truecrypt/truecrypt.htm

Open source is going to be scrutinized even more now that this has happened and so soon after the OpenSSL heartbeat thing...

Kirk

NetScanTools Pro v11.61 Released May 9, 2014

This release fixed an urgent algorithm problem in the Whois tool that was introduced in v11.60. And we added 50 new top level domain Whois servers in addition to the 180+ added in v11.60 – the IANA has been busy. This includes servers for new TLDs like ‘.wtf’ and ‘.fail’.

Another minor change is that the DNS entry boxes labeled ‘DNS Server’ now all accept up to 48 entries. Some were only accepting 16 before old entries would age out of the list. As usual, the other databases were all updated.

Users with active maintenance plans can click on Help/Check for New Version for update instructions.