NetScanTools Pro 10.x
Revision History

NetScanTools Pro 10.x Full Revision History

10.98.2 February 23, 2011

-Improved messages that show if writing to a registry location fails. They now suggest escalating the privileges by starting the program with 'Run as administrator'.
-All temporary snmp files are now removed on program exit.
-Improved handling of WinPcap interfaces where both IPv4 and IPv6 addresses are bound to the interface. Affects several programs.
-Internal changes to DNS Tools resolver.
-Port Scanner and NetScanner now show warning messages if privileges are not sufficient to run UDP scan and Subnet Mask test respectively.
-Updated SQLite to version 3.7.4.
-Updated database files.

10.98.1 November 18, 2010

Changes to Existing Tools
-NetScanTools Pro now starts properly under USER mode accounts on Windows 7 and Windows Vista. Previous versions forced you to login to an administrator account to use the program.
-Updated database files.

10.98 October 4, 2010

Changes to Existing Tools
-Ping will now allow up to 8192 consecutive pings to sent. Problems occurred in the previous version if you exceeded 256 pings as defined in Setup.
-Certain DNS functions that use the secondary resolver (ex. Get Basic DNS Records) will now properly handle the truncated flag in the UDP response that indicates the query should be retried using TCP.
-DNS Tools - Core: Fixed problem where if a very large response to a single record query was obtained, all the records would be displayed. Example would be a large PTR record response for a single IP address.
-Updated SQLite to version 3.7.2.
-Updated database files. Removed whois prefix files.

10.97 June 28, 2010

Changes to Existing Tools
-Network Statistics: the functions that disconnect an established TCP connection have now been fixed, ie. double-clicking a connection or using the Disconnect All TCP button.
-TCP Term: connection negotiations simplified so that it now works better when connecting to a telnet port.
-ARP Ping: removed unused variables.
-Email Validate: added timestamp for query. Minor changes to make verbose/short work better.
-NetBIOS Info - Shares/System Basics: changed the method of obtaining hidden shares so that more hidden shares will be reported. Account privileges affect what you can see with this tool, so we added a method for logging onto remote machines with user accounts.
-Documentation updated to reflect these changes.
-Updated database files.

10.96.1 April 12, 2010

New
-Packet Generator: added new field to override UDP packet length in UDP header. The data payload (either the text payload or the 'data from file') is used in its entirety whether or not you override the packet length in the UDP header or the IP header. UDP packets no longer need to have an even number of bytes for the payload. These changes now allow malformed UDP packets to be generated. Script language updated to allow control of the UDP packet length value. Thanks for M.I. at AT&T for the suggestion.

Changes to Existing Tools
-Reworked the automatic version checking function. You can control it in Help/Set Preferences.
-Documentation updated to reflect these changes.


10.96 April 6, 2010 Installed Version only. There was no USB version release at this revision level.

New
-Added MD5 Hash Signature option to save a companion text signature file whenever text results, databases and capture files are saved. You are prompted at the time of file saving.
-Added .fo and .co.nl to the whois database.
-Packet Generator: added simple looping and infinite looping to the script language.
Included a new sample script for this.

Changes to Existing Tools
-Packet Generator: speeded up send continuous mode.
-Packet Generator: now displays error if packet is not sent.
-Fixed minor lookup issue when finding a country given an IP address.
-NetBIOS Basic now correctly reports Windows 7 machines instead of 'nt 6.1'.
-Corrected ICMP parsing type response.
-Removed Clear Passive Discovery Database Files button.
-Automatic Private IP Addressing (169.254.x.x) is now identified on program startup and the user is asked if they want to include those interfaces. Those addresses normally only appear in Windows if DHCP fails.
-Clear button for entered DNS IP addresses now added to Whois and Real Time Blacklist Check.
-Packet Viewer: corrected parsing of IGMP packets and now identifies Spanning Tree Protocol and HP Logical Link Control packets.
-Updated SQLite to version 3.6.23.
-Updated database files.

10.95 February 1, 2010

New Tools
-DNS Tools - Advanced: DNS List Speed Test - this tool accepts a list of DNS IPs (hostnames are allowed, but not recommended), then it sends an identical forward or reverse resolve query to each DNS and shows the response time. It also shows the data that each DNS sends back.
-Whois: Multi-Domain Whois - this tool accepts as input a base domain name, like 'netscantools', then it appends a top level domain or secondary level domain extension like '.ca' or '.co.uk' and queries the appropriate whois server. users can select from a large number of extensions to add. The whois queries are done as a group or batch much like the current batch whois tool.
-Whois: Autonomous System Numbers are now accepted as input. Format is AS##### where # are numbers.

Changes to Existing Tools
-DNS Tools - Core: NSLOOKUP and Get Basic DNS Records now show DNS response time (specifically high resolution timing).
-DNS Tools - Core: Test Default DNS changed to that the DNS response time is now high resolution timing.
-Real Time Blacklist Check: a DNS manually entered in the DNS Server field is now added to the list of previous DNSs.
-Subnet Calculator: corrected email subject lines for when results are emailed.
-SNMP Dictionary Attack Tool: added new community names to the dictionary based on recent lists of common passwords.
-SNMP Dictionary Attack Tool: corrected problem communicating with devices outside the local subnet.
-Traceroute: 50ms is now the new default Delay Between Hops value. This value is recommended for TCP Traceroute.
-Whois: Bulk Whois has been changed to accept a list of IP addresses and/or domain names, one per line in the input text file. The editor has been removed.
-Whois: altered whois server database structure and updated several servers.
-Whois: now reports more information about the DNS response - especially if it fails to respond.
-Packet Viewer: added packet capture file save and load and clear buttons directly to the main program window.
-Fixed the operation of all right click Ping/Traceroute functions.
-Fixed the operation of the command line options.
-Modified concurrent license functions.
-Updated all dates to 2010.
-Updated splash screen.
-Updated SQLite to version 3.6.22.
-Updated database files.
-Tested successfully on Windows 7 - 64 bit and 32 bit editions.

10.94 November 2, 2009

-DNS Tools - Core: added Get Basic DNS Records tool. Retrieves SOA, A, NS, MX, CNAME, PTR and TXT records as applicable for a given IP address or hostname or domain name. This tool can be run in batch mode.
-DNS Tools - Core: added request selectors for NSEC, RRSIG and DNSKEY records into Setup and the dropdown resource record list.
-DNS Tools - Core: NSEC record is now parsed for RR Types Covered.
-DNS Tools - Core: RRSIG record now shows more RR "types covered" and displays the signature in hex.
-DNS Tools - Core: DNSKEY record now displays the public key as hex. Also now computes and shows key id so it can be matched to the information in RRSIG.
-DNS Tools - Core: fixed grayout of DNS and clear button.
-DNS Tools - Core: fixed Zone Transfer so it no longer crashes on medium to large zone transfers.
-URL Capture: improved error reporting.
-Passive Discovery: Added informational messages about when to use the Recalculate button. The Subnet Mask and Subnet Starting IP address are no longer saved between sessions.
-Updated to WinPcap 4.1.1 which is better supports Windows 7.
-Updated SQLite to version 3.6.19 and converted it to static linkage to avoid interference with previous versions.
-Recompiled all files that were affected by the SQLite and WinPcap changes.
-Updated database files.
-Tested on Windows 7 Release Version.

10.93.1 September 1, 2009 Installed Version Only

-After installing KB971090 for Visual C++ 2005 SP1 on our development machines, the version of ATL/MFC/CRT referenced in the generated manifests was changed from 8.0.50727.762 to 8.0.50727.4053. This forced us to recompile all executables and dlls for the program to be sure the change is consistently propagated. This change only affects the installed version of NetScanTools Pro, it does not affect the USB version because the USB version uses static linking instead of dynamic linking of Side by Side (SxS) dlls. There are no changes to functionality in this version.

10.93 August 18, 2009

-Added Registered Trademark notices. NetScanTools is now a registered trademark of Northwest Performance Software, Inc.
-Ping-Enhanced: fixed problem where Continuous Ping would not always shut off if Stop were pressed as ping packets were going out.
-Real Time Blacklist Check: fixed problem where if a host/domain name could not be resolved to an IP address, it would continue and incorrectly use 255.255.255.255 as the input.
-Fixed hostname to IP resolver problems in Whois, Real Time Blacklist check and Email Validate.
-Email Validate: Now uses only the DNS shown in the entry box. Has better DNS MX record error reporting. Added button to clear list of DNS Entries.
-Subnet Calculator: Added decimal representation of input IP address.
-DNS Tools - Core: Fixed resolver problem getting A record for IP Address.
-Port Scanner: fixed problem with UDP reporting. If ICMP comes back, it's now shown regardless of state of Show Non-Responding Ports box.
-Whois: added link to view map of IP address location if latitude and longitude coordinates are available.
-Help Wizard: moved to above Tools in tree and updated it.
-ARP: fixed restore of previous data into results grid.
-Concurrent Usage: fixed problem where if you started the program more than once it would erase the lockfile from the first instance causing an incorrect exit message.
-Updated database files.

10.92 June 29, 2009

-Ping - Enhanced: added new TCP mode. Use it for determining TCP latency. Both SYN and ACK send modes are supported along with TCP header field control. Packet Differentiated Services bits are also controllable so packet delivery priority can be tested for ICMP, TCP and UDP packets.
-Ping - Enhanced: renamed AutoPing to Continuous Ping. Changed the logging methods to support AutoSave to make it consistent with other tools.
-Traceroute: added randomize option for the Window and Sequence TCP header fields.
-Traceroute: made pwhois the default IRR/ASN server.
-Traceroute and Ping: improvements to the way outgoing and returning packets are tracked so that the timing calculations are accurate.
-TTCP: Fixed Number and Length fields to match descriptions. Added new Debug Mode selection. Added Timestamp and Local IP information to the start of transmit and receive output.
-Packet Generator: changed TOS bits to match later RFCs, now called Differentiated Services bits. These bits are also controllable so packet delivery priority can be tested for ICMP, TCP and UDP packets.
-Whois: New additional queries for IP addresses. Can show ASN and lat/long info.
-Whois: internal select timeout change.
-Autosave additional check added to verify that the output file still exists. A message will be shown if it cannot be found or written to.
-Graphical Ping: ping packet data size can now be up to 4095 bytes.
-Wireshark Launcher (USB Version only): will now properly launch Wireshark portable version if it is currently residing on the same USB drive.
-Updated database files.

10.91 June 1, 2009

-SQLite: Fixed a problem where SQLite was unable to open databases with some acceptable non-English European language characters in the SQLite database paths. The paths appeared corrupted to SQLite.
-Configuration: added a method for using a paths.ini in the executable directory to override the datafile paths. This allows the current user and all user data paths to be changed so that the data files can be placed in a directory of your choice.
-NetScanner, traceroute et al: Column header sorting is no longer allowed while the data gathering process is active. This applies to any grid based results like NetScanner, traceroute, ping etc.
-Set Preferences: Added DEP compatibility control.
-WHOIS: Added several new file extensions: ke, re,.cat, ug, eu.org. Updated .id and added message explaining that .mil info is no longer available from any whois server.
-Updated database files.

10.90 May 1, 2009

-New Tool: Graphical Ping. This can ping a target on a periodic basis, then
display the ping response time in a graph. The response time is also saved to a database for future retrieval and analysis.
-ARP Tool: added hostname column and resolver.
-DNS Tools - Advanced: improved Domain Keys by adding a query for 'default._domainkey.TheDomainInQuestion.whatever'.
-SMTP Email and Relay Test: added options for requesting delivery and read receipts. Also added Urgent Priority option and the ability to add one user defined custom email header option.
-Realtime Black List: added logic to identify failed servers. Added timestamp to report. Updated server list.
-NetScanner: significant speedup for IP ranges within your local subnet -- typically a factor of 4x faster than 10.82.
-NetScanner: added right click export option for IP and Hostname columns.
-NetScanner: corrected a problem where the program would occasionally crash if the NetBIOS selection was active.
-Ping: fixed datafile payload problem and renamed to Ping - Enhanced.
-Edited system capabilities warning text.
-Added methods for future support of concurrent licensing.
-Moved IP/MAC, NetTopography, and WOL databases from common data area to user data area.
-SNMP: WALK now shows results even if the OID does not exist on the target.
-Removed nstprocnv.exe from the distribution. No longer required.
-Welcome left panel group: Added About NetScanTools Pro and links to our blog, twitter and demonstration videos.
-Updated WHOIS database.
-Updated SQLite to v3.6.13.
-Updated all executables that use SQLite to match the new SQLite version.
-Updated database files.

Note: 10.82 was an urgent fix because NSLOOKUP was not showing any results. If you use NSLOOKUP, this makes a difference to you. If you don't use it, then upgrading to 10.82 can be done at a later time.

10.82 February 28, 2009

-DNS Tools - Core: NSLOOKUP fixed. It was not showing results.
-Batch Translation: minor change to the way IP to Country operates when multiple IP addresses are shown. Only the first one is used.

10.81 February 23, 2009

-Network Statistics: fixed Windows 7 crash problem. There are no other known Windows 7 problems at this time.
-URL Capture: added warning message when you click on a link in the web page text.
-Web browser handler for all web pages is now defined in Set Preferences rather than Launcher.
-Numerous string functions converted to secure versions to prevent buffer overflows.
-Batch Translation: status text field is wider.
-ARP tool: controls are now grayed out during ARP Scan.
-Traceroute: WinPcap Interface Selector now grays out during trace.
-Ping: packet type selection and other controls now gray out during ping.
-Packet Generator: MAC address fields are now wider.
-DNS Tools - Core: significant internal changes to eliminate the random memory deallocation crashes that sometimes occurred in Zone Transfer and other functions.
-Updated SQLite to v3.6.10 to match Switch Port Mapper SQLite version.
-Updated all executables that use SQLite to match the new SQLite version.
-Updated database files.

10.80 December 18, 2008

-Now supports Windows Common Controls v6.x. Certain controls will appear different under Windows XP/Vista.
-Removed unnecessary Product Registration button from Check for New Version. Registration should only be done if the program requests it at startup.
-Port Scanner: input fields (port start/end etc.) now are correctly active in response to the type of scan chosen.
-SNMP: user interface rearranged to allow a better view of previously entered OIDs.
-SNMP: added autosave to setup.
-SNMP: Added time/date stamp to results display headers.
-Network Statistics: user interface rearranged to allow improved view of the tcp/udp connection list. Removed old code specific to 9x/ME which is no longer supported.
-Name Server Lookup renamed DNS Tools - Core. IP Drilldown, ENUM and DNS Verify moved to new DNS Tools - Advanced. Manual version of Zone Transfer added so that the user can specify the exact DNS to attempt a zone transfer. User interface layout reworked.
-DNS Tools - Core: Removed Dig w/AXFR since other zone transfer tools are available in the same set of tools.
-Added new DNS Tools - Advanced window.
-DNS Tools - Core: Added retrieval of new SPF record type per RFC 4408.
-DNS Tools - Advanced: added tool to retrieve the version and authors of a DNS server.
-DNS Tools - Advanced: added tool to retrieve and compare serial numbers from authoritative DNS for a domain or IP range.
-DNS Tools - Advanced: added SPF and Domain Keys retrieval tool.
-Automated Tools - improved method of obtaining NS server for host/domain names.
-Whois: internal improvements and minor updates to the Whois server database.
-Whois: we now check for SPF in the TXT record to eliminate any other types of text records that may appear. The DNS SPF resource record type is checked as a fallback.
-Whois: added a direct NS record lookup if NS records are not returned by authoritative lookup for the domain.
-TTCP: gray out works for all controls during operation.
-Batch Translation: added option for using a specific user-defined DNS or using the system default DNSs.
-Traceroute: added autosave to setup.
-Traceroute: added mode quick select control to main window.
-Packet Viewer: added ARP packet type filter.
-RFC Reference: added RFCs 2782, 4408 and 5227.
-Updated all executables that use SQLite to match the new SQLite version.
-Updated SQLite to version 3.6.7.
-Updated database files.

10.71 October 3, 2008

-Corrected problem resolving the name of a DNS in the Name Server Lookup tool. This problem was introduced in 10.70. The IP address of the DNS was not always found correctly. Also added a new failure message if DNS name does not resolve to an IP address.
-Added new feature to the Advanced Query Setup to Autosave all Name Server Lookup tool results to a single text file. This results file can be viewed and cleared as necessary. Its use is optional. Thanks to Phil L. for this suggestion.
-Corrected a minor version notation issue on the About NetScanTools Pro window.
-Expanded the size of the File Versions window found the About Window.
-Updated all executables that use SQLite to match the new SQLite version.
-Updated SQLite to version 3.6.3.
-Updated database files.

10.70 August 21, 2008

-Added URL highlighting to text based results areas where appropriate. Links open your default web browser or mail utility.
-Databases are only opened when first needed. This is will result in a slightly faster startup and lower memory usage.
-Email Validate: improved error/warning message reporting.
-OS Fingerprinting: Changes to support different responses Windows XP gives to ICMP packets depending on Windows Firewall ICMP settings.
-Connection Detection: fixed problem with removing all listening ports from list.
-Name Server Lookup: Added new tool DiG +trace. This tool shows NS records and other records (A, PTR, SOA) for a host or IP address starting at the root servers and back down again to the Authoritative Servers.
-Name Server Lookup: DiG significantly updated to match 9.x output format.
-Name Server Lookup: all tools except Simple Query now show the starting timestamp.
-Name Server Lookup: Command line equivalent now shown for NSLOOKUP queries.
-Name Server Lookup: Corrected problem establishing the Authoritative Servers used as part of the List Domain (AXFER) tool. Output now also shows all the Authoritative Servers.
-Name Server Lookup: Corrected the way "retries" functions. "0" now means one try.
-Name Server Lookup: Corrected problem accepting short IP addresses as name servers. ie. x.x.x.x where each x is a single digit.
-Added improved method for accessing locally stored Maintenance Plan parameters.
-Fixed several minor memory leaks in both the main program and SNMP Dictionary Attack.
-Updated all executables that use SQLite to match the new SQLite version.
-Updated SQLite to version 3.6.1.
-Updated database files.

10.61 June 26, 2008

-Protected Storage Viewer: Improved warning messages for Windows Vista.
-Name Server Lookup: Fixed problem with Dig.
-OS Fingerprinting: we now disallow target IP equal to WinPcap interface IP.
-NetScanner: Fixed first use problem in where start IP was showing as zero "0".
-NetScanner html report: Fixed "<" ">" symbol problem. -NetScanner: corrected Setup/Enable Post-Sweep Delete of Non-Responding IPs problem. The state was not being saved correctly.
-SNMP Arp Cache tool: added interface manufacturer column. Also changed formatting of MAC address presentation to be consistent with other parts of the program.
-Removed all linkage to iphlpapi.dll. Functions from it are now loaded only when needed.
-Updated SQLite to version 3.5.9.
-Updated database files.

10.60 May 14, 2008

-Rebuilt main program in Visual C++ 2005 from Visual C++ 6. Many internal changes.
-Converted main program to MFC in DLL library for better long term compatibility.
-All remaining supporting programs converted to Visual C++ 2005.
-Removed nstmtspt.dll.
-Email Validate: many internal changes to speed it up plus the addition of bulk validate of a list of email addresses. Also added test type selection, HELO/EHLO hostname and Verbose or Short results formatting.
-DHCP Server Discovery: added automatic autosizing of column widths after discovery completion.
-Connection Detection: fixed logic showing active connections. Buttons are now properly grayed out.
-Connection Detection and Ident Server: Added warning message that the port cannot be used if the port is already in use by another program.
-Batch Translation: Red color coding is no longer used to indicate a failed DNS. The word FAIL is shown in the leftmost column next to the line number. This is in support of Section 508 requirements.
-Launcher now shows the current handling executable for each protocol: http, ftp etc.
-Preferences/Set Web Browser now shows the default handling program for the file extension .html. Added button to reset this value to the default. This only affects viewing results in the web browser. It is independent of the Launcher HTTP setting.
-Searching for text in results is now fixed. Control-F and F3 now work properly.
-Name Server Lookup: added server response time reporting to Test Default Servers.
-Name Server Lookup: test default server button now grays out properly.
-Port Scanner: fixed problem where if ARP did not return the MAC address of the target or the gateway, it would keep doing ARP packet sends/waits for every port. Now it tries ARP twice, then uses the broadcast MAC on failure. Applies to all WinPcap modes on your local subnet.
-Section 508 compliance: added alt text for html image in results view in web browser.
-Section 508 compliance: fixed accessibility menu item action for optional tools.
-Section 508 compliance: set Preferences now added to help and accessibility menus.
-Section 508 compliance: Email Validate, Finger, Name Server Lookup, OS Fingerprinting, Simple Services, SNMP, TTCP, URL Capture, Whois now have a title in the html results viewed in a web browser.
-NetBIOS Info now shows Windows Vista/Server 2008 computers and MAC address is now upper case. Additional attribute decoding.
-TTCP: fixed multiple internal issues. It now works properly.
-Improved WinPcap interface selection dialog that is used when we cannot identify the interface as selected by the user under WinPcap Interface IP.
-The text on several tools is now consistent for selection of the WinPcap Interface IP: ARP, ARP Ping, OS Fingerprinting, Packet Generator, Ping, Port Scanner, Promiscuous Mode Scanner and Traceroute.
-Updated SQLite to version 3.5.8.
-Updated SNMP library to version 5.4.1.
-Updated database files.

10.55 January 22, 2008

-Database Tests - added new tool to lookup a service name or number and return the corresponding information based upon the services database.
-Name Server Lookup: "Who am I?" now shows all default system DNS in order and adds the domain name used by the system.
-Name Server Lookup: Added new feature called "Test Default Servers" which takes an IPv4 address or hostname, then does a query of each default system DNS in order.
-OS Fingerprinting: removed banner text stating that it was experimental.
-Packet Generator/Scripting: Fixed problem defining source and target IP address, it was not correctly overriding the display control IP from within a script.
-Packet Generator/Scripting: Added new script commands TCP_DATAFROMFILE and TCP_DATAFILEPATH to allow you to generate a TCP packet with a payload from a file.
-Packet Generator/Scripting: Added new script commands UDP_DATAFROMFILE and UDP_DATAFILEPATH to allow you to generate a UDP packet with a payload from a file.
-Packet Generator/Scripting: Added new script commands ICMP_DATAFROMFILE and ICMP_DATAFILEPATH to allow you to generate an ICMP packet with a payload from a file.
-Packet Generator/Scripting: updated script example.
-Updated all copyright notices to 2008.
-Updated SQLite to version 3.5.4.
-Updated database files.

10.54 November 28, 2007

-OS Fingerprinting: added identification of some models of D-Link, Linksys, Nortel and Netgear switches.
-Several improvements to NetScanner: Added option to automatically delete non-responding IPs at end of sweep. The Sweep Stats Report is now shown as an HTML web page in your browser. Detailed drilldown on an IP now presented in HTML web page. Netbios control options were simplified. Removed the old 'merge drilldown' option and replaced it with an enhanced web browser standard report.
-Added Check for New Version to toolbar Help menu.
-Promiscuous Mode Scanner - fixed problem that caused a crash if you stopped a scan in progress.
-RPCInfo - converted DLL to VC++8 (2005) from VC++6. Fixed error reporting bugs and corrected threading issues.
-Name Server Lookup - converted DLL to VC++8 (2005) from VC++6. Minor internal cleanup.
-Ping - added right click menu options for ftp, http, telnet and whois.
-Added checkbox to control display of splash screen in Set Preferences.
-Fixed Local Computer and LAN Info in Automated so that it properly shows adjacent Windows computer operating systems.
-Changed most DNS queries in Automated so they are faster and less queries are made to obtain the same information.
-Updated to WinPcap 4.0.2.
-Updated database files.

10.53 August 15, 2007 (includes changes for USB version)

-Urgent fix to SNMP tools. Several problems that were introduced in v10.50 were fixed.
-Raw Socket/MS ICMP DLL selection removed from Set Preferences.

10.52 August 3, 2007

-Lots of internal cleanup of old obsolete code mostly by removing conditional support for win9x/ME operating systems.
-Traceroute completely rewritten to function on Windows Vista. Much faster in all modes. New packet options including changes to payload.
-Traceroute in Automatic tools modified for Vista. Now ICMP DLL only.
-Net Topography modified for Vista. Now uses MS ICMP DLL only.
-Packet Generator: fixed port definition problem in UDP sending.
-Complete rewrite of OS Fingerprinting with vastly improved accuracy and now functions properly on Vista. Added new signatures designed to identify Windows Vista, Windows 2003, Windows XP, some types of Hewlett Packard, Cisco, 3Com and Dell Switches, and several other devices.
-Fixed Automated whois so it now uses the proper whois servers automatically.
-Fixed whois database problem with '.org' queries.
-Upgraded to SQLite v3.4.1. All programs using SQLite were recompiled.
-Port Scanner Ping is now MS ICMP DLL only.
-Login Access Credentials more visible in Check for New Version.
-Updated to WinPcap 4.0.1.
-Updated database files.

10.51 July 3, 2007

-Installed version no longer saves SNMP persistence files in c:\usr.
-Packet Generator now has improved target MAC address finding algorithm.
-All functions that use WinPcap for packet transmission now warn the user when an attempt is made to send packets through a WAN (PPP/SLIP) interface. WinPcap 4 cannot send packets through these types of interfaces.
-All ICMP custom packet functions moved from Ping Tool to Packet Generator Tool. The ICMP custom packet sending has been improved.
-Ping Tool redesigned. MS ICMP DLL Ping is a new option. WinPcap ICMP and UDP Ping are a new option and UDP Socket Ping Transmit with WinPcap receive are also new options. The three WinPcap receive options all show packet times down to the microsecond level. This tool now works properly on Windows Vista.
-RFCs 1393, 1475 and 1788 have been added to the RFC library.
-Packet Viewer now correctly decodes packets.
-Upgraded to SQLite v3.4.0. All programs using SQLite were recompiled.

10.50 June 7, 2007

-All temporary files are now placed in the directory preferred by the operating system rather than with the program. This conforms to Windows Vista requirements.
-All program data files such as persistent databases and other similar files are now saved to the user data directory preferred by the operating system rather than with the program. This conforms to Windows Vista requirements.
-Temporary files used to save persistence between tools are now deleted from the Set Preferences window without sending them to the recycle bin. This mostly affects the USB version.
-All Save to file options now point to My Documents. This conforms to Windows Vista requirements.
-All databases have been converted to SQLite.
-Converted most subprograms to VC++8 (2005) from VC++6;
-Packet Generator rewritten to support Windows Vista.
-Packet Generator min packet to send is now lower limited at 1.
-Network Info and Stats connection list now works under Windows Vista.
-Packet Capture tool now captures packets in a format compatible with Wireshark and Ethereal. Those tools can be launched (if installed) from a right click menu option for greater detailed viewing of captured packets.
-Protected Storage Viewer now exports to XML.
-Protected Storage Viewer now shows IE7 information.
-Promiscuous Mode Scanner now works correctly with Windows Vista when the ARP table contains many 'invalidated' entries.
-NetBIOS Info-Shares/System Basics now properly shows the Node Type.
-UDP Ping now works properly under Windows 2000/XP.
-Real Time Blacklist check server list has been updated.
-IRR server list has been updated.
-Updated Whois, IP to Country and other databases.
-SNMP Dictionary Attack now restores previous target list to display.
-Automated report section "The DNS name server(s) responsible for ..." has now been fixed.
-Fixed problems with Net Topography when the Resolve IPs to hostnames box was checked.
-Added RFC 3263 to reference library.
-Fixed problems with the registration parser.
-Digital Signatures added to all binaries we created.
-Issues with Ping, Traceroute, Netscanner continue to persist under Windows Vista. This will require a complete rewrite of those features as a permanent fix. Workaround is to select 'Use MS ICMP DLL' in Set Preferences. Your Vista system may operate correctly if an inbound ICMP rule allowing all ICMP to pass is created in Control Panel/Admin Tools/Windows Firewall. However, this seems to work intermittently for unknown reasons.

10.43 January 16, 2007

-Fixed problem which prevented the TCP SYN/Other port scans from working correctly.
-Updated database files.
-Removed relays.ordb.org from Real Time Blacklist database.
-Now using WinPcap 4.0 beta 3.

10.42 November 20, 2006

-Packet Generator has changes to allow it to send bursts of packets at the highest rate your computer and WinPcap will allow. Tested speed can be as little as 50 microseconds between identical packets, your results may vary.
-Fixed window resizing problem in Check for New Version.
-Fixed rare output formatting problem getting country for IP address.
-Updated documentation in Custom ICMP Packet Generator (PING) section to detail steps necessary to send custom ICMP packets out when Windows Firewall is active.
-Many internal changes to support operation on Microsoft Vista. Arp Sweep on the Arp Tool, Arp Ping, Promiscuous Mode Detection and Packet Generator have all been fixed so that they now work properly on Vista. Other parts of the program such as Ping, Traceroute, Net Topo and NetScanner do not work on Vista unless you choose MS ICMP DLL in the Set Preferences window. Network Statistics lower window with the connection endpoint list does not work under Vista. Future versions of NetScanTools Pro will correct these issues.
-Now using WinPcap 4.0 beta 2.

10.41 October 16, 2006
-Changed the way databases are opened to ensure the database index is rebuilt every time the database is first accessed. This eliminates .mdx file corruption in the USB version.
-Certain databases are now only opened when needed speeding up program start.
-Changed the way Name Server Lookup tool activates and stores most recently used list of DNS record types. Addresses apparent hang of program in USB version.
-Changed the method of saving tool state for all grid results tools. This makes the switching between tools faster. This will be most noticeable in the USB version.
-Whois: fixed the initialization of the 'Step One' prefix to properly include trailing space.
-Whois: fixed bulk whois so it now properly appends all bulk results. This problem was introduced in 10.4 when the autoclear checkbox was removed.
-Name Server Lookup: changed ENUM telephone number lookup to allow user defined root servers other than e164.arpa. Added Set Defaults button to Setup and there was a minor rearrangement of buttons on the tool window.

10.4 September 25, 2006

-Faster startup due to changes in the way the databases are loaded.
-SNMP: New engine. Better indication of tool status including during SNMP MIB starting and loading.
-SNMP Dictionary Attack tool is new and can be accessed through the SNMP Tool.
-Name Server Lookup: Added decoding support for DNS records RRSIG, NSEC and DNSKEY (RFC 4034).
-Name Server Lookup: replaced the confusing 'unknown_server_name' string with the IP address of the server.
-RFC Reference: Added several RFCs to the library.
-Launcher: Added ability to launch SSH and SFTP programs.
-Real Time Blacklist: server list has been expanded and the response code is now displayed.
-Protected Storage Viewer: Added ability to delete an entry from Protected Storage using the right click menu.
-URL Capture: Added timestamp, URL and IPv4 address to the results area.
-NetBIOS Advanced: Improved functional feedback during Connect/Disconnect.
-Whois: Added more information to query results. We now show name servers used for queries, timestamps, and sources of information are now clearly marked.
-Whois: Added previous query results history (ie forward and back buttons much like in a web browser) and a method of removing annoying legal and advertising messages.
-Whois: Added the two step referral for .jobs and .tv.
-Added database cleanup to Packet viewer and Passive Discovery launchers.
-Passive Discovery: the display of 'found' systems now appears at one second polled intervals rather than only when the Stop button is pressed.
-Passive Discovery: Fixed calculation of base Network Address when the recalculate button is pressed. It now accepts input from the Subnet Mask control as it should so that you can manually override any automatically calculated values.
-IP Packet Viewer has been renamed to Packet Viewer to reflect the new ability to see non-IP packets such as ARP.
-Packet viewer: Fixed problem filtering by TCP port number.
-Packet Viewer: Added capture of ARP packets. We now save the whole packet including ethernet headers. Unknown protocol packets are also saved.
-Ping: Left five columns now sort numerically.
-Traceroute tool now has improved mode selection in the setup window. It also now correctly shows the time it takes for a response from the final hop in TCP mode. TCP traceroute now correctly completes upon receipt of TCP packets from the target in response to our transmissions. Added delay between hop packet transmission.
-Traceroute: Time column now sorts numerically.
-Traceroute Setup defaults button now puts 1 for starting hop instead of zero.
-Automated Tools: Changed the traceroute default values to match defaults in manual tools.
-Added icons on many buttons throughout the program.

10.31 March 21, 2006

This release concentrates on fixes and improvements in the area of registration, maintenance plan reminders, and checking for new versions. There are some user interface responsiveness fixes. The only added features are minor.

-Changed the maintenance plan reminder so that it gives options for reminder frequency.
-Fixed action in progress logic problem with launching SNMP functions.
-Check for Service Pack button on About NetScanTools Pro window renamed to Check for New Version. It now automatically opens the Online group, then opens the Check for New Version window presenting the correct login credentials.
-The automatic reminder to Check for New Version now automatically opens the Online group, then opens the Check for New Version window presenting the correct login credentials.
-Viewing the Check for New Version window now resets the automatic reminder clock correctly.
-Fixed registration logic problem that affected installations that upgraded from v9 (2004) to v10.21 through 10.3.
-Improved responsiveness of Whois tool to cancel button and fixed grayout issues with some buttons.
-Improved responsiveness of DHCP Server Discovery to cancel button and minimized chance of problems when switching to another tool. Reduced upper limit of listening timeout to 10 seconds, ie. all responding DHCP servers have to respond within the time limit shown. Tool now warns about limited results when using all zeroes MAC address.
-Tools/Help Wizard now resizes Questions and Answers windows to match main window. Questions are pre-expanded out and answers now expand out one more level. Questions are now alphabetized.
-Fixed these command line options (ping, autoping, trace, whois, netbios, timesync, and finger) and added 'simplelookup' command line option.
-Added new option in TimeSync Scheduler to allow a timesync every minute.
-Added Maintenance Plan Expiration notice to the Check for New Version window.
-Added Program Version to Registration Information notes on About NetScanTools Pro window.

10.3 January 6, 2006
-All SNMP related functions now can use SNMP v2c in addition to v1.

-Fixed IP AS/IRR information gathering problem in Batch Translation.

-Added IP to Country column for Translate function in Batch Translation.

-Added timing to Batch Translation.

-Added copying of the column header text to the clipboard when Copy All is selected in any of the grid results based tools like Ping or Traceroute.

-Fixed problem sorting Responding IP column in NetScanner.

-Added an edit menu option to copy the image of the graph to the clipboard for pasting into another graphics program. Affects the time graph viewer accessible from the right click menus of the Ping, Traceroute and NetScanner tools.

-Fixed domain section of whois query on an IP address. If it comes back with a hostname ending in in-addr.arpa, it does not try to do a whois on that extension.

-Fixed IP Drilldown button gray out in the Name Server Lookup tool.

-Fixed problem in Passive Discovery affecting selection of interface if WinPcap does not return an IP address to associate with the interface.

-Added referral query to .cc domain extension in whois.

-Added whois support for new .eu and .travel domains. Updated several IP allocation server names.

-Improved system uptime reporting on TimeSync.

-Fixed grayout of Set/Clear Test buttons in SMTP Relay Test.

-Fixed a potential for a buffer overflow exploit involving the Ident Server. Note that the IDENT Server is DISABLED by default and the IDENT server can only operate when NetScanTools Pro is running, IDENT server is NOT a service program. Thanks to (y0 [at] w00t-shell.net) for bringing this to our attention.

Support Topic, Aug 22, 2005. A user has informed us of a potential for a buffer overflow exploit involving the Ident Server. Note that the IDENT Server is DISABLED by default (v2000r3 or newer). The IDENT server can only operate when NetScanTools Pro is running, IDENT server is NOT a service program. Immediate corrective action: Please go to the Tools group menu and click on Ident Server (it is on the tree near the bottom, just above the Help Wizard) or locate the Ident Server tab on 2003 or earlier. Uncheck the Enable IDENT Server box and do not use the Ident server. For added safety please be sure that your computer's firewall software blocks incoming connections to TCP port 113. This problem was corrected in v10.3.

10.21 Release Notes, August 12, 2005

-10.2 was withdrawn on Aug 8 due to incompatibilities with some Windows 2000 systems. 10.21 corrects that problem.
-We now have compiled everything to support WinPcap 3.1 Final version from August 5, 2005. The full installer and upgrade installers now have the WinPcap 3.1 installer added.
-corrected problem with TOS bit settings in Packet Generator.
-Added new TOS higher bits and their script commands are below. These are not in the document:
These all default to 0 (zero) which means unchecked box on the window.

TOS_DELAY=0 or TOS_DELAY=1
TOS_THROUGHPUT=0 or TOS_THROUGHPUT=1
TOS_RELIABILITY=0 or TOS_RELIABILITY=1
TOS_BIT6=0 or TOS_BIT6=1
TOS_BIT7=0 or TOS_BIT7=1

10.2 Release Notes, August 5, 2005

-Whois now has reverse lookups for IP queries followed with whois lookups of the domain found with that reverse lookup, IP to Country mapping for IPs or domains that resolve to IPs. Abuse.net info and SPF records are now displayed for domains. Changes to support RIPE's new database access flags.
-Significant speed up to NetScanner. Removed whois from NetScanner because the bulk whois feature is now available in the whois tool. This simplified NetScanner and stopped some crashing that occasionally occurred upon program exit. Added export of IP address column and export of hostnames to batch whois list.
-IP Packet Viewer now has double click to view packet data. Added view results grid in web browser. Added right click options to search the stored packets for text strings which is a significant help searching for a specific set of data in a transmission. Also changed the way we talk to WinPcap in order to minimize the impact of some antispyware/antiadware programs which delete anything using WinPcap without the user's permission.
-Internal changes to Real Time Blacklist Check tool for increased speed.
-Passive Discovery. Changed the way we talk to WinPcap in order to minimize the impact of some antispyware/antiadware programs which delete anything using WinPcap without the user's permission.
-SMTP Relay test. We fixed login domain name problem and added buttons to set and clear the test checkboxes.
-Packet Generator now has basic scripting. See help file for full description of syntax and usage.
-NetScanTools Pro main executable. Changed the way we talk to WinPcap in order to minimize the impact of some antispyware/antiadware programs which delete anything using WinPcap without the user's permission. There are error messages for how to handle a WinPcap error.
-Added checkbox on Set Preferences to control fade-in for the 2003/XP/2000 splash screen.
-Traceroute now has Country column which is populated based upon IPv4 address country assignment or allocation. This also applies to the Traceroute feature in the Automated section. Column width formatting of the web results view has been improved. When in TCP mode, the thread count is automatically placed at one then restored to the original count for other modes.
-Traceroute Setup. Changed the functionality of the defaults button to restore default values for most items on the setup dialog.
-Ping column width formatting of the web results view has been improved.
-These tools now correctly remember column widths when you switch tools or exit the program: Ping, Traceroute, ARP, ARP Ping, DHCP Discovery, Batch Translation, IP to Country Mapping, IP Mac Address Management, NetBIOS Info Basic, NetScanner.
-Batch Translation and Whois (batch mode editor) now can check for duplicate entries during import from text files and manual mode entries.
-Subnet Calculator. Added Display Inv Mask checkbox for displaying the subnet mask results in inverse format.
-Protected Storage Viewer now correctly parses MSN account information.
-WinPcap version is now shown in About information.

10.1 Release Notes, April 2005

-Improved Registration Reminder window. Combined registration activation entry fields into one field that parses the email with the registration information.
-Program now checks to see if it is already running. Only one instance of the program may run at a time.
-Enhanced SMTP Relay test with better results parsing, individual test analysis and control over individual tests to run. Cleaned up the gray out of controls when tests are being run.
-Wake-on-LAN now allows the easy import of a text file with multiple hosts and MAC addresses.
-Corrected issue in TimeSync where getting the machine uptime might cause a crash under certain circumstances.
-Improved selection of interface if WinPcap does not return an IP address to associate with the interface. Affects a number of tools.
-Added popup warning about using TCP Traceroute with more than 1 thread.
-Increased ping packet length default from 16 to 32 bytes in NetScanner. At least one flavor of UNIX was not responding to the shorter length, but did respond to the longer length.
-Save to text file right click option improved to autoappend .txt if it or any other extension is missing.
-Updated 'grouped' tools tree.
-Whois now allows repeat right-click queries of highlighted text that appears in the Whois results window, not just from other results windows that switch to the Whois tool.
-Name Server Lookup now allows repeat right-click 'Simple' queries of highlighted text that appears in the Name Server Lookup results window, not just from other results windows that switch to the Name Server Lookup tool.
-Email Validate now has a 'Stop of first success' checkbox to avoid continuing on querying multiple servers after the first successful validate is complete.
-Updated whois support for new IP registry afrinic.net.

10.0 Release Notes, February 2005

-Registration now mandatory to activate your maintenance plan which allows you to obtain support and updates. Registration must be done within 15 uses after installation or the software stops working. Registration FAQs.
-ARP: Arp sweep is now significantly faster and now populates the Arp cache with IP/MAC associations. Arp tool display reworked.
-ARP Ping[new]: This tool can be used to send ARP packets to a specific LAN IP address to check response time and also check for duplicate IP addresses.
-Cache Forensics (2 tools)[new]: URL Cache Viewer allows you to view cookies, history and cached files used by Microsoft Internet Explorer. Protected Storage Viewer allows you to view protected storage and see autocomplete field information, saved site login information and Microsoft Outlook (Express) email login and passwords.
-Discovery-Passive: this tool listens to network traffic to determine active IP addresses on your subnet. It can also be used indirectly to see IP transmission activity levels (counts) as a method for finding computers that talk excessively due to trojans or other problems.
-Email Validate: now does a 'RCPT' test in addition to the 'VRFY' test. Other changes include support for authorized login to smtp server.
-IP Address/Country Mapping: updated database.
-Name Server Lookup: IP Drilldown added. This new feature takes an IPv4 address and then requests responsible name server information for each of four levels (class D through A) in in-addr.arpa namespace. The DNS server IP address input field has now been added to the main view in addition to being available on the setup window.
-Net Topography: new setup window that is unique to the tool instead of being shared with traceroute.
-NetScanner: Significant speed improvements by moving the NetBIOS query from a single thread to being parallel within each scan thread. ARP thread has also been removed and replaced with a different ARP test at the end of a scan. This test only contacts responding IPs that have no MAC addresses so that we can determine the MAC address. The ARP test is only done on computers within the same subnet.
-Network Statistics: process to port mapping has been rewritten to allow it to work on dual processor machines. The trojan ports database has been updated.
-Packet Generator [new]: this tool allows you to have control over most aspects of the IP header and the TCP/UDP headers when sending a test TCP or UDP packet. Use this tool with care.
-Ping: this tool now does either an ICMP only, UDP only or combination ping.
-Port Scanner: recommend that Ping before Scan be used when doing a Full Connect scan if you are operating on a Windows XP sp2 platform.
-Promiscuous Mode Scanner: this tool checks your LAN for network interfaces listening for packets in promiscuous mode. This mode usually indicates that the interface is listening for packets not intended for it.
-RFC Reference: more RFCs added.
-Subnet Calculator: CDIR notation added to hosts count input list.
-TimeSync: removed PDH.DLL dependency and went with swap file creation time. Changed lists of NTP servers to support new round-robin pool.ntp.org server selection.
-Traceroute: worked to improve TCP Traceroute performance.
-URL Capture: now has edit box for contolling the 'host:' field found in the HTTP header. This allows contacting websites where one IP address hosts several domain names.
-WHOIS: rwhois now automatically follows referrals to the rwhois or whois server that has the data. Updated whois server lists.
-Updated Accessibility Menus.
-New splash screen added.