See my prior post on Portable GIMP; the portable app launcher should be modified to use the same GTK+ directory, possibly by looking in ../lib/gtk+-2.0 for GTK+.
Just install Ethereal to your Flash drive (It's small enough already) and place the WinPcap installer on your flash drive to install when you plan to use Ethereal.
I have try this and it works. First install Winpcap file and then copy the following files to a temp folder from the winpcap installation directory.
Packet.dll
pthreadVC.dll
WanPacket.dll
wpcap.dll
daemon_mgm.exe
NetMonInstaller.exe
npf_mgm.exe
rpcapd.exe
This file should be copy to %systemroot%\system32
npf.sys
Again install ethereal on your PC first. e.g (c:\ethereal)
Copy the entire folder c:\ethereal to c:\ether .
With all the copied files you may uninstall all winpcap and ethereal.
Now copy all the packet.dll files to c:\ether. Now you can run ethereal by using the c:\ether folder. But remember npf.sys must be in system32
Thanks, that worked very well. I only had to make one small correction. I installed npf.sys into %systemroot%\system32\drivers instead of %systemroot%\system32.
The vast majority of packet sniffers rely on a packet driver (e.g. WinPcap), so you're not likely to find many portable ones. In total I've found three, and they're all command line apps and all need Windows 2000 or above:
I assume that 2ksnf is the most helpful, as pcap is a popular format and you can probably find something to parse the log file and display it nicely. Ethereal can do that of course, although Dice would probably be easier to make portable.
Are you talking about Ethereal Network Protocol Analyzer?
Rob Loach [Website] [Projects]
yes
I would also like to see a portable version of this.
I have been looking all over for a similar portable app, and nothing. This would be an excellent app for IT people.
See my prior post on Portable GIMP; the portable app launcher should be modified to use the same GTK+ directory, possibly by looking in ../lib/gtk+-2.0 for GTK+.
Just install Ethereal to your Flash drive (It's small enough already) and place the WinPcap installer on your flash drive to install when you plan to use Ethereal.
thats not portable. we are looking for a solution that doesnt require installing or running services.
I have try this and it works. First install Winpcap file and then copy the following files to a temp folder from the winpcap installation directory.
Packet.dll
pthreadVC.dll
WanPacket.dll
wpcap.dll
daemon_mgm.exe
NetMonInstaller.exe
npf_mgm.exe
rpcapd.exe
This file should be copy to %systemroot%\system32
npf.sys
Again install ethereal on your PC first. e.g (c:\ethereal)
Copy the entire folder c:\ethereal to c:\ether .
With all the copied files you may uninstall all winpcap and ethereal.
Now copy all the packet.dll files to c:\ether. Now you can run ethereal by using the c:\ether folder. But remember npf.sys must be in system32
Thanks, that worked very well. I only had to make one small correction. I installed npf.sys into %systemroot%\system32\drivers instead of %systemroot%\system32.
The vast majority of packet sniffers rely on a packet driver (e.g. WinPcap), so you're not likely to find many portable ones. In total I've found three, and they're all command line apps and all need Windows 2000 or above:
I assume that 2ksnf is the most helpful, as pcap is a popular format and you can probably find something to parse the log file and display it nicely. Ethereal can do that of course, although Dice would probably be easier to make portable.
Any others?
Apparently someone has done it already and made Ethereal a standalone product: PacketStuff (via). I've not tried any of those tools yet.