In the following section, we will discuss how to extract the basic and easily accessible information about any computer system or network that is linked to the Internet. Reviewing a company’s website is an example of passive footprinting, whereas attempting to gain access to sensitive information through social engineering is an example of active information gathering.įootprinting is basically the first step where hacker gathers as much information as possible to find ways to intrude into a target system or at least decide what type of attacks will be more suitable for the target.ĭuring this phase, a hacker can collect the following information − Footprinting could be both passive and active. WinDump can be used to watch, diagnose and save to disk network traffic according to various complex rules.Footprinting is a part of reconnaissance process which is used for gathering possible information about a target computer system or network. is also the home of WinDump, the Windows version of the popular tcpdump tool. Some of these networking tools, like Wireshark, Nmap, Snort, and ntop are known and used throughout the networking community.

Thanks to its set of features, WinPcap has been the packet capture and filtering engine for many open source and commercial network tools, including protocol analyzers, network monitors, network intrusion detection systems, sniffers, traffic generators and network testers. This library also contains the Windows version of the well-known libpcap Unix API. WinPcap consists of a driver that extends the operating system to provide low-level network access and a library that is used to easily access low-level network layers.

For many years, WinPcap has been recognized as the industry-standard tool for link-layer network access in Windows environments, allowing applications to capture and transmit network packets bypassing the protocol stack, and including kernel-level packet filtering, a network statistics engine and support for remote packet capture.

Wireshark tutorial in hindi