网络取证分析工具 NetworkMiner 1.1 发布

     <p>NetworkMiner是一款windows平台下开放源代码的网络取证分析工具，同时也是一款比较好的协议分析工具，它通过数据包嗅探或解析PCAP 文件能够检测操作系统，主机名和网络主机开放的端口。NetworkMiner还能够从网络通信中提取文件。<br /> <img title="网络取证分析工具 NetworkMiner 1.1 发布" border="0" alt="网络取证分析工具 NetworkMiner 1.1 发布" src="https://simg.open-open.com/show/79a83baf5623e54c57450729c3f1e34e.jpg" width="600" height="480" /></p>    <p>目前  NetworkMiner更新至1.1版，新版主要改变如下：</p>    <p>    * Extraction of parameters sent to Google Analytics into NetworkMiner’s “Host Details”. These parameters include: screen resolution, color depth, browser language and flash version.<br />     * You can drag-and-drop one or multiple pcap files onto NetworkMiner.exe to have it start up and begin loading the dropped pcap files. You can also submit your pcap files as arguments from the command line.<br />     * Multiple SMB/CIFS and NetBIOS improvements, such as support for multiple simultaneous SMB file transfers over the same TCP session as well as support for NetBIOS Session Service keep-alive messages.<br />     * Added support for Point-to-Point Protocol (PPP) frames in pcap files.<br />     * Improved stability when loading pcap files. Thanks to psteier for identifying this bug.</p>    <p>项目地址：<a href="/misc/goto?guid=4958190655322887449" target="_blank">http://www.netresec.com/?page=NetworkMiner</a><br /> 工具下载：<a href="/misc/goto?guid=4958190656067717006" target="_blank">http://sourceforge.net/projects/networkminer/files/networkminer/</a></p>