You are here

ethereal?

12 posts / 0 new
Last post
Anonymous (not verified)
ethereal?

that would be useful portable if it can be

Rob Loach
Rob Loach's picture
Offline
Last seen: 15 years 7 months ago
Developer
Joined: 2005-12-09 17:29
Etereal

Are you talking about Ethereal Network Protocol Analyzer?

Rob Loach [Website] [Projects]

Dan2552 (not verified)
yes

yes

DigeratiPrime
Offline
Last seen: 17 years 1 month ago
Joined: 2005-12-11 20:55
ethereal

I would also like to see a portable version of this.

themanbornwithin (not verified)
I have been looking all over

I have been looking all over for a similar portable app, and nothing. This would be an excellent app for IT people.

bluefoxicy
Offline
Last seen: 15 years 3 months ago
Joined: 2005-12-27 15:52
Portable GTK+

See my prior post on Portable GIMP; the portable app launcher should be modified to use the same GTK+ directory, possibly by looking in ../lib/gtk+-2.0 for GTK+.

Jagerkatze
Offline
Last seen: 17 years 4 months ago
Joined: 2005-12-13 19:16
Same MEthod as C&A

Just install Ethereal to your Flash drive (It's small enough already) and place the WinPcap installer on your flash drive to install when you plan to use Ethereal.

DigeratiPrime
Offline
Last seen: 17 years 1 month ago
Joined: 2005-12-11 20:55
thats not portable. we are

thats not portable. we are looking for a solution that doesnt require installing or running services.

tatw (not verified)
Portable Ethereal for yourself

I have try this and it works. First install Winpcap file and then copy the following files to a temp folder from the winpcap installation directory.
Packet.dll
pthreadVC.dll
WanPacket.dll
wpcap.dll
daemon_mgm.exe
NetMonInstaller.exe
npf_mgm.exe
rpcapd.exe
This file should be copy to %systemroot%\system32
npf.sys

Again install ethereal on your PC first. e.g (c:\ethereal)
Copy the entire folder c:\ethereal to c:\ether .

With all the copied files you may uninstall all winpcap and ethereal.

Now copy all the packet.dll files to c:\ether. Now you can run ethereal by using the c:\ether folder. But remember npf.sys must be in system32

SylvainG
Offline
Last seen: 17 years 9 months ago
Joined: 2006-07-05 08:55
Thanks, that worked very

Thanks, that worked very well. I only had to make one small correction. I installed npf.sys into %systemroot%\system32\drivers instead of %systemroot%\system32.

Thox
Offline
Last seen: 17 years 7 months ago
Joined: 2006-02-09 06:46
Portable sniffers

The vast majority of packet sniffers rely on a packet driver (e.g. WinPcap), so you're not likely to find many portable ones. In total I've found three, and they're all command line apps and all need Windows 2000 or above:

I assume that 2ksnf is the most helpful, as pcap is a popular format and you can probably find something to parse the log file and display it nicely. Ethereal can do that of course, although Dice would probably be easier to make portable.

Any others?

Thox
Offline
Last seen: 17 years 7 months ago
Joined: 2006-02-09 06:46
PacketStuff

Apparently someone has done it already and made Ethereal a standalone product: PacketStuff (via). I've not tried any of those tools yet.

Topic locked