We have been using the Delphi version of the packet sniffer for more than a
year, and have only positive experiences with it. Even more impressing was
the quick response from the development team when a bug was found. Resulting
applications are ultra stable, fast and functions without any problems on
all platforms all our customers are using.
Rune Fredriksen, Chief Technology Officer
Omnitree Norge ASA
|
|
Packet Sniffer SDK: Performance does matter!
Packet Sniffer SDK is a development suite for network packet capture in multi-Gigabit network environment.
Packet Sniffer SDK library set is 100% exactly what you knew you wanted but never expected to
get: a fully self-contained, dynamically-loaded packet capture technology that is compatible with
Microsoft Visual C++, Microsoft Visual Basic .NET, Intel C++, Borland C++ Builder, Borland Delphi
and many others.
- Adjustable Packets Pool: The top reason of your application zero packet loss, maps packets
from application mode space to the PSSDK internal driver kernel mode space and back.
- FastBPF (32/64bit BPF JIT compiler): Allows to filter traffic 6 times faster than it may be
done with classic BPF virtual machine.
- Asynchronous queues for packets receiving/sending: Allow to process traffic in real time.
Use these features of PSSDK and optimize both your application performance and resources required!
|
Packet Sniffer SDK component/library family allows you to use the full power of any modern
visual or non-visual development environment for creating various packet capture network applications
working with raw network adapter or loopback traffic.
Using Packet Sniffer SDK the developer does not need to create special network drivers or to
learn internal implementation of the network functionalities in all Windows family operating systems -
Packet Sniffer SDK allows you to focus on the main task which your application must solve.
Main Packet Sniffer SDK elements are developed as objects with properties, methods, and events
that make the packet capture applications development process simpler and more flexible.
To simplify the usage of LIB and DLL Packet Sniffer SDK library implementations, special
wrapper classes are created, in which functions for working with PSSDK objects are represented
as class methods.
| Edition | Description |
| DLL |
May be used practically with any modern IDE. |
| VCL |
May be used with Borland Delphi and/or Borland C++ Builder. |
| Static library for Microsoft VC compatible compilers |
Intended for using with modern Microsoft VC++/Intel C++ compatible compilers for creation of
self-contained (single .EXE file) high-performance program modules. |
| Static library for Borland C compilers |
Intended for using with modern Borland C++ compatible compilers for creation of
self-contained (single .EXE file) high-performance program modules. |
 |
.NET wrapper for PSSDK objects |
| Packet Sniffer SDK package is provided with .NET wrapper for PSSDK objects source texts. This
wrapper allows to integrate and use PSSDK with .NET applications with easy, and may be used in any
development environment supporting .NET technology. |
 |
Support of BPF |
| Packet Sniffer SDK supports packet filtering by BPF (BSD Packet Filter, user-settable packet filters)
at the level of the built-in packet capture driver. |
 |
Support of FastBPF |
| Packet Sniffer SDK supports new FastBPF technology (Just-In-Time BPF filters compilation). FastBPF
works approximately 6 times faster than classic BPF filtering by BPF virtual machine. |
 |
No pre-installed packet capture drivers are required |
All editions of the Packet Sniffer SDK contain internal packet capture driver, which is dynamically
loaded when the application is launched. When your application is started, it loads and launches
built-in packet capture driver. When your application is closed, built-in packet capture driver is
unloaded.
This feature of PSSDK allows to create portable applications which may be launched from removable
devices without installation on the user's PC. |
 |
Support of Gigabit networks |
| You can create an application to capture Gigabit network traffic with zero packet loss. Certainly, your
success depends on CPU, RAM, HDD subsystem performance, etc. |
 |
Support of multiprocessor (SMP) systems |
| Packet Sniffer SDK supports symmetric multiprocessing platforms with near linear performance dependance
on additional CPU resources. |
 |
Packet generating/sending functions |
| This feature allows to create and send packets with any structure. It may be very useful if you're
going to develop network security scanner with non-intrusive vulnerability detection capabilities, or
application using its own non-standard protocol. |
 |
WinPCap to PSSDK migration module |
| Allows easily (in hours) migrate libpcap/WinPCap-based projects to Packet Sniffer SDK. |
 |
Capturing of TCP/UDP traffic, loopback support |
| With PSSDK you can capture TCP sessions and reconstruct them in TCP data streams. Also localhost TCP
sessions capturing with binding them with local processes is supported. |
 |
BPF assembler and disassembler |
| To increase readability of your BPF programs your can write them in BPF Assembler, also you can
disassemble existing BPF filters in human-readable format. |
| Component | Function |
| HNPSManager |
initializes Packet Sniffer SDK library, serves HNAdapterConfig objects |
| HNAdapterConfig |
provides access to the network adapter configuration data |
| HNAdapter |
captures/sends packets from a network adapter |
| HNUserFilter |
creating and testing of user-defined BPF filters, examining packets with such filters |
| HNPacket |
working with IP/TCP/UDP packets |
| HNQueue |
buffering and synchronized multithreaded packets processing; the basic element of the queue is
HNPacket object |
| HNTcpManager |
reconstruction of TCP sessions and data-flow processing |
| HNTcpSession |
defining of TCP session properties |
| HNLBAdapter |
capturing of the local system TCP and UDP traffic |
| HNLBSession |
defining of the properties of a TCP session between local and remote hosts |
| HNLBHosts |
defining of the addresses of two hosts connected by TCP/UDP |
| HNFileAdapter |
dumping captured traffic to a CAP file in real-time, rebroadcasting traffic from a CAP file as a traffic source. |
Windows NT 4.0, Windows 2000, Windows XP, Windows 2003, Windows Vista, Windows Longhorn,
Windows 98, Windows ME, WinXP x64, Win2003 x64, Vista x64.
- Ethernet (802.3);
- Token-Ring;
- FDDI;
- WAN (modem).
- Hardware monitoring applications;
- Applications, which use non-standard networks protocols;
- Network traffic analyzers;
- Network activity and load balance analyzers;
- Traffic generators;
- Network security scanners;
- Network Intrusion Detection Systems, etc.
|
03/06/2008
This is mostly bugfix release, also it fixes some problems caused by incorrect behavior of some VPN and virtual network adapters drivers.
12/15/2007
Ethernet emulation mode for Loopback traffic, Adjustable packets pool, support of x64(AMD64, EM64T) systems in BPF JIT compiler, packets marking in BPF filter, the queue for packets sending....
09/12/2007
Confirmed compatibility with Windows Server 2008 (codename "longhorn"), several minor bugs fixed
07/04/2007
Vista, VeriSign certificate, UNICODE, working with CAP files, static loading of drivers; HNQueue performance significantly increased.
07/09/2006
Since version 3.0 you can develop applications for 64-bit systems.
More news ›
- RSS
- 2.0
|
|