NetworkMiner 2.0 Released

Erik Hjelmvik — Thu, 11 Feb 2016 11:09:35 -0000

We have released NetworkMiner 2.0 this week. However, please note that we have decided not to coninue hosting the software on SourceForge any longer. So please get your latest version of NetworkMiner here:
www.netresec.com/?page=Networkminer

NetworkMiner 1.6 Released!

Erik Hjelmvik — Mon, 16 Jun 2014 10:08:52 -0000

New features in version 1.6 of NetworkMiner include:

Reassembled files and images can be opened with external tools by drag-and-dropping items from NetworkMiner's Files or Images tabs.
Improved extraction of emails and attachments sent over SMTP.
Failed DNS lookups that result in NXDOMAIN and SERVFAIL are displayed in the DNS tab along with the flags in the DNS response.
Remote live sniffing enabled by bringing the PCAP-over-IP feature into the free open source version of NetworkMiner

More info about the new release is available in Netresec's blog post:
http://netresec.com/?b=1463B56

NetworkMiner 1.3 released!

Erik Hjelmvik — Thu, 12 Apr 2012 22:08:50 -0000

NetworkMiner 1.3 is now released!
Read more on our blog: http://netresec.com/?b=1240207

NetworkMiner 1.2 released

Erik Hjelmvik — Sat, 19 Nov 2011 17:12:51 -0000

More info available on the Netresec Blog:
http://www.netresec.com/?page=Blog&month=2011-11&post=NetworkMiner-1-2-Released

NetworkMiner 1.1 released!

Erik Hjelmvik — Thu, 15 Sep 2011 17:27:28 -0000

NetworkMiner version 1.1 is now released on SourceForge! More information is available on the Netresec blog:
http://www.netresec.com/?page=Blog&month=2011-09&post=NetworkMiner-1-1-Released

A NetworkMiner blog

Erik Hjelmvik — Tue, 08 Mar 2011 20:55:23 -0000

Did you know that we at NETRESEC are running a blog that covers detailed functionality of NetworkMiner as well as other topics in the network security / network forensics field?

You can fin our blog over at:
http://www.netresec.com/?page=Blog

The RSS feed is available from:
http://www.netresec.com/rss.ashx

Enjoy!

/erik

NetworkMiner 1.0 is now released!

Erik Hjelmvik — Sat, 05 Feb 2011 17:52:05 -0000

NetworkMiner is now is stable and mature enough to advance to version "1.0".
I have therefore released NetworkMiner 1.0 on SourceForge today!

Here are some new features in NetworkMiner since the previous version:

* Support for Per-Packet Information header (WTAP_ENCAP_PPI) as used by Kismet and sometimes Wireshark WiFi sniffing.
* Extraction of Facebook as well as Twitter messages into the message tab. Added support to extract emails sent with Microsoft Hotmail (I.e. Windows Live) into Messages tab.
* Extraction of twitter passwords from when settings are changed. Facebook user account names are also extracted (but not Facebook passwords).
* Extraction of gmailchat parameter from cookies in order to identify users through their Google account logins.
* Protocol parser for Syslog. Syslog messages are displayed on the Parameter tab.

You can download NetworkMiner from any of the following urls:

http://www.netresec.com/?page=NetworkMiner
http://sourceforge.net/projects/networkminer/
http://networkminer.sourceforge.net/

Network forensics in Linux with NetworkMiner

Erik Hjelmvik — Tue, 16 Dec 2008 07:55:17 -0000

A nice blog post, describing how to run NetworkMiner under *nix based OS’s, was recently posted by C.S. Lee. The blog post shows how to install Wine in Ubuntu Linux, and then how to launch NetworkMiner using Wine.

Read the whole blog post at:
http://geek00l.blogspot.com/2008/12/drunken-monkey-running-network-miner.html

Perform WiFi sniffing with NetworkMiner

Erik Hjelmvik — Mon, 19 May 2008 06:12:15 -0000

The newly released version 0.84 of NetworkMiner supports live sniffing of WLAN traffic (IEEE 802.11). This allows users to perform wireless network forensic analysis on any Windows machine with an AirPcap adapter installed. The RadioTap protocol as well as the Logical Link Control (LLC) protocol are also implemented in order to extract as much information as possible about the hosts communicating over a WLAN.

More info can be found at the NetworkMiner Wiki site:
http://networkminer.wiki.sourceforge.net/WiFi+Sniffing

Wanted: Beta testers with network traffic access

Erik Hjelmvik — Mon, 10 Mar 2008 13:35:42 -0000

Do you have access to a large number of PCAP files, a monitor port (SPAN port or network tap) on a busy switch/router or do you practice the art of Wi-Fi sniffing? Then you're the person I'm looking for!

When developing dissectors for various protocols I need to test/evaluate my implementations with real network traffic. This is a complicated task for me since I don't have any access to network traffic other than my own.

I am therefore looking for beta testers who are willing to try new releases of NetworkMiner before they are released on SourceForge.

If this sounds interresting, please contact me at:
hjelmvik [at] users [dot] sourceforge [dot] net