FramePad - network sniffer and protocol analyzer

FramePad is a Windows based packet sniffer and protocol analyzer, designed from the ground up with ease and functionality in mind. It allows you to examine data from a live network or from a capture file on disk. You can interactively browse the capture data, viewing summary and detail information for each packet.

FramePad aids at monitoring network traffic in order to recognize and decode certain packets of interest. It puts your network adapter into promiscuous mode, capturing everything that travels through the network. This can help you to solve network bottlenecks or spot illegitimate activity like crack attacks, Spyware, and other sort of malicious traffic.

ScreenShots

Click for full-size image

Click for full-size image

Download

The latest version number is 1.2.

Download FramePad 1.2 (3.6 MB)

Read the Documentation (HTML)

Installation

FramePad comes with standard Windows installer that will guide you through the setup process. You need also to install the Winpcap packet capture library to be able to capture network packets.

Download the Winpcap 3.0

Summary of Features

Work with multiple documents.
Run multiple captures simultaneously with different capture filters.
Open and edit large capture files up to 100 MB in size.
Search for packets containing string or data pattern.
Search for packets using the predefined filters.
Save and load filters from file.
Use protocol variables to define a new filter.
Use hardware filter flags to limit type of frames captured.
Use bookmarks to mark network frames in documents.
Start and stop multiple running captures with one command.
Print and print preview captured network frames.
Customize document view columns.
Docking protocols window.
Docking raw data window.
Documents can be edited: copy, cut and paste packets.
Document views can be filtered.
Filter templates allow to define filter skeleton and specify values later.
FramePad can be automated by ActiveX scripts and programming languages.
Select related packets by source or destination address, port number or conversation.

Packet Capture

You can start multiple parallel capture sessions. Each capture session can be configured to have different capture filter and buffer settings. There is no limit how many sessions you can run at the same time. You can start or stop all packet captures with one menu command. The document capture filter can be changed without stopping the running capture.

Working with Filters

The filters are used to limit the number of packets captured and displayed in the capture window. In the first case you use the filter as document capture filter and apply it to each captured packet. All packets that pass the filter will be saved with the document. In the second case you will use the filter as display filter and apply it to document view. FramePad documents can have many views and each view it's own display filter.

In addition you can use the the filter as search condition in the Find dialog. FramePad comes with number of predefined protocol filters that are ready to use. All filters can be saved and loaded from disk file.

Awards