Free packet capturing software for mac

RumLog 4.2.2, which is made specially for the short wave DXercreated, is a logging, QSL handling and printing tool. Basic logging features are included for the higher bands up to 1.2 cm. RUMlog can handle an unlimited numbers of logs and an unlimited numbers of QSOs per log. An user editable, all time country database is used for automatic DXCC recognition.

Major Features:

1. RUMlog includes routines, tables and an interactive gray line map to support the user in gray line dxing.
2. Using RUMlog you can print QSL card labels and manage your incoming paper QSLs. The Logbook of The World (LoTW) and eQSL are fully supported, and you can create files for the Global QSL service very quick.
3. You can get different statistics for paper- or LoTW QSLs. It's just a mouse click to upload or download new QSLs to/from eQSL or LoTW.
4. RUMlog can use the ON6DP QSL manager database to inform you about managers or addresses and it can build and use an own manager and IOTA database, extracting the information from dx-cluster spots.
5. RUMlog keeps you up to date about worked, confirmed or missing DXCCs and provides you with country lists and detailed statistics. Quick log searches or more detailed log queries are possible.
6. RUMlog can establish a dx-cluster connection via the internet or via packet radio. A simple terminal is integrated for a Packet Radio connection. RUMlog will separate DX-spots and alert you via e-mail or Growl when there is a ,new one' DXCC or IOTA spotted. Multiple interactive band maps virtualize activities on the air.
7. RUMlog can interface with two transceivers, setting the main parameter on your TRX from the logbook or vice versa. Kenwood, Elecraft, Yaesu and Icom transceivers are supported.
8. RUMlog has import and export functions to allow exchange of log data in different formats to other logging tools.
9. RUMlog can interface with Google Maps (Web-Browser based) and Google Earth. (Must be installed on your computer)
10. Except the DXCC statistics, RUMlog tracks the most interesting areas of the world for the most important awards: IOTA islands, CQ zones, ITU zones, Grid Squares, US States and German DOKs.

Justniffer captures TCP packets, reassembles and reorders them, performs IP packet defragmentation and displays the tcp flow in the standard output.
Justniffer is useful for logging network traffic in a standard (web server like) or in a customized way.
Justniffer can log timings, for example it can log the response time). It is very useful for tracking network services performances (e.g. application server, web server, etc.).
The main differences with other sniffers are:
- Justniffer captures tcp/ip traffic and handle all tcp/ip stuff (reordering, retrasmissions, defragmentation). The tcp flow adjustment is performed using linux kernel code included in a slightly modified version of the nids library.
- Justniffer reports timing informations. So it can be usefull for tracking network system performances

Enhancements
- fixed compilation issues with gcc 3.3.3
- added connection.timestamp
- fixed idle.time.0 formatting
- fixed documentation
- more adherence to RFC 2616: looking for headers in case insesitive mode
- new HTTP headers added

Kismet is an 802.11 layer2 wireless network detector, sniffer, and intrusion detection system.
Kismet will work with any wireless card which comes with support for the raw monitoring (rfmon) mode, and can sniff 802.11a, 802.11b, and 802.11g traffic.
Kismet identifies networks by passively collecting packets and detecting standard named networks, detecting (and given time, decloaking) hidden networks, and infering the presence of nonbeaconing networks via data traffic.

Main features:
- Ethereal/Tcpdump compatible data logging
- Airsnort compatible weak-iv packet logging
- Network IP range detection
- Built-in channel hopping and multicard split channel hopping
- Hidden network SSID decloaking
- Graphical mapping of networks
- Client/Server architecture allows multiple clients to view a single
- Kismet server simultaneously
- Manufacturer and model identification of access points and clients
- Detection of known default access point configurations
- Runtime decoding of WEP packets for known networks
- Named pipe output for integration with other tools, such as a layer3 IDS like Snort
- Multiplexing of multiple simultaneous capture sources on a single Kismet instance
- Distributed remote drone sniffing
- XML output
- Over 20 supported card types

Enhancements
- This is a complete rewrite of Kismet (referred to as Kismet-Newcore while under development).
- It includes a new user interface, improved tracking, IDS functions, a plugin architecture... for both server and client, and auto-detection of drivers and supported channels on sniffing devices

Switzerland is a tool for testing networks, ISPs and firewalls developed by the Electronic Frontier Foundation (www.eff.org).
Switzerland will spot IP packets which are forged or modified between clients, inform you, and give you copies of the modified packets.

Enhancements
Lots of bugfixes and some new features:
- Make the messages that Switzerland gives users less cryptic and more informative! Especially
- Improve on the notification of modified/forged packets in versions 0.0.x. In the case of modifications, provide specific reports of which packet fields have been modified, from what and to what. In the case of injections/forgeries, provide tcpdump-style representations of the packets.
- Include a new command line tool, study-switzerland-pcaps, to perform the above analysis based on the -in and -out pcap modification/forgery logs produced by Switzerland. This will be useful both for old logfiles from 0.0.7 and for newly created logs.
- Reduce the incidence and duration of the "you cant connect, because we already have a connection from your IP" problem.
- Fix several internal bugs in the server, which 0.0.7 "handled" by catching exceptions and trying to ignore them.
- When modified/forged packets are observed, dont tell other parties what your NIC and routers MAC addresses are
Internal improvements and adjustments:
Refactor things out of Switzerland.py:
- Matchmaking is now separated and easier to understand
- Forgery context operations are now part of SwitzerlandLink.py
- There are some minor but incompatible changes to the wire protocol, in which reports on forgeries are passed around with the fo-context and forged-details messages.
- We have some traceroute collection infrastructure now, although were not using it yet

CloudVPN is a multi-protocol mesh virtual network. Simply - CloudVPN is capable of transporting any reasonable packet protocol, for any application that needs to communicate.
Cloud nodes act as a meshing and transporting layer, and applications connect to them using a gate socket.
Such client applications include:
- Ethernet tunnel, that uses the cloud as one big virtual network, which, given the mesh properties, also proves to be efficient and secure; and gives CloudVPN the "classical VPN function".
- Secure chat client, using the same security adventages.
- Filesharing client (which really proposed itself as a bittorrent alternative)
- Optimized radio-like broadcasting client
- Whatever else you like.

Enhancements
- Full Win32 support was added with the TAP-Win32 package. Massive cleanup was done. The build system was migrated to autotools, which allows easy compiling on many platforms. Some... compilation fixes and one local socket improvement were made

hping2 is an interactive packet costructor and responses analyzer that uses the same CLI of the ping program (but with a lot of extensions).
hping2 can be used to performs a lot of tasks, like testing of firewall rules, (spoofed) port scanning, et cetera.
The interface is inspired to the ping(8) unix command, but hping isnt only able to send ICMP echo requests.
hping2 supports TCP, UDP, ICMP and RAW-IP protocols, has a traceroute mode, the ability to send files between a covered channel, and many other features.
hping2 is multi-platform and works on the following OSs: Mac OS X, Linux, FreeBSD, NetBSD, OpenBSD, Solaris, Windows.

Main features:
- Firewall testing
- Advanced port scanning
- Network testing, using different protocols, TOS, fragmentation
- Manual path MTU discovery
- Advanced traceroute, under all the supported protocols
- Remote OS fingerprinting
- Remote uptime guessing
- TCP/IP stacks auditing
- hping can also be useful to students that are learning TCP/IP.