NetScanTools® Pro
Technical Details - Tools and Utilities

ARP Tools

ARP (Address Resolution Protocol) is used only in IPv4 networks.

ARP Cache
Lets you view and edit your computer's ARP Cache (ARP Table).

ARP Ping
Sends ARP Packets to a specific IPv4/MAC address on your LAN. Shows response time and any duplicate IP addresses. Shows timing chart.

ARP Scan
Sends ARP packets to every IPv4 address within range of IPs on your LAN. Shows all active devices, firewalled or not.

Duplicate IP Scanner
Scan your subnet for duplicate IPv4 addresses being shared by two or more devices.

Promiscuous Mode Scanner
Actively scans your subnet or LAN for computers or devices with the network interfaces set in Promiscuous Mode. It indicates devices possibly capturing packets.

Active and Passive Discovery Tools

ARP Scan
Actively sends ARP packets to every IPv4 address within range of IPs on your LAN. Shows all active devices, firewalled or not.

Connection Detection
Passively listens for incoming connections to your computer's TCP/UDP ports. Logs connection attempts.

DHCP Server Discovery
Actively looks for DHCPv4 servers on each network attached to your computer.

Duplicate IP Scanner
Scan your subnet for duplicate IPv4 addresses being shared by two or more devices. Limited to the current subnet.

Network Neighbors
Actively uses Multicast Ping to identify nearby IPv6 devices.

Network Shares - SMB
Actively uses SMB/CIFS/NetBIOS protocols to find computers in a workgroup. (formerly called NetBIOS Info - Basic). Deprecated in favor of the SMB Scanner.

Network Routing Visualizer
Actively uses traceroute to find the routes taken by packets to a list of targets. Shows the results in a tree format. (formerly called Net Topography)

Packet Capture
Passively listens to network traffic on a selected interface and records it in a file for review.

Passive Discovery
Passively listens to network traffic on your LAN and shows which computers are talking.

Ping - Enhanced
Actively uses ICMP, TCP, or UDP to find active devices. Supports both IPv4 and IPv6. Shows min/max/avg latency, jitter and a timing chart.

Ping Scanner (also called NetScanner)
Actively scans a range of IPv4 addresses looking for responses. The range can be on your LAN or across the internet. Shows timing chart.

Port Scanner
Actively scans a computer or other device for open TCP or UDP ports.

Promiscuous Mode Scanner
Actively scans your subnet or LAN for computers or devices with the network interfaces set in Promiscuous Mode. It indicates devices possibly capturing packets.

RPC Info
Actively communicates with *nix Portmapper service.

SMB Scanner
Retrieves SMB versions supported by a target.

SNMP Scanner
Actively scans a range of IP addresses for devices with active SNMP v1 or v2c.

SSL Certificate Scanner
Retrieve SSL Certificates from web servers and see their expiration dates.

System Info - SMB
Actively uses SMB/CIFS/NetBIOS to communicate with a device and show a number of parameters. (formerly called NetBIOS Info - Advanced)

Traceroute
Actively uses ICMP, TCP, or UDP to find the route taken by packets to a device. Supports both IPv4 and IPv6. Shows timing chart.

Traceroute - Graphical
Actively uses ICMP to constantly find the route taken by packets to a device and gather statistics about packet loss and timing. The cumulative timing is shown in a real time chart. Supports both IPv4 and IPv6.

Whois Tool

Find the ownership of domains**, IP addresses and ASN numbers

Whois Tool
A whois client supporting over 100 domain extensions (Top Level Domains - TLDs). Includes a rwhois protocol client. Bulk/batch whois queries are also supported. Does domain, IPv4, IPv6 global and ASN queries to whois servers around the world.

**Note: Whois data has been severely impacted as of May 2018 by the EU GDPR meaning most useful information is now redacted and has been classified as private. You will find the domain lookups to be the most impacted. IP Address and ASN lookups are still largely unaffected by GDPR.

Ping and Traceroute Tools

These tools rely on ICMP and ICMPv6 replies from devices to establish their presence.

PingTrend
Tests the ping latency and jitter of a device over time using ICMPv4 packets. Much faster than classical Graphical Ping.

Graphical Ping
Monitors the ping response time of a device over time using ICMPv4 packets. Graph shows response time vs. elapsed time.

Network Routing Visualizer
Uses traceroute to find the routes taken by packets to a list of targets. Shows the results in a tree format. (formerly called Net Topography)

Ping Scanner (also called NetScanner)
Actively scans a range of IPv4 addresses looking for responses. The range can be on your LAN or across the internet. Shows timing chart.

Ping - Enhanced
Uses ICMPv4, TCP, UDP and ICMPv6 packets to find devices and show the response time to our packets. Shows min/max/avg latency, jitter and a timing chart.

Traceroute
Uses ICMP, TCP, or UDP to find the route taken by packets to a device. Supports both IPv4 and IPv6. Shows timing chart.

Traceroute - Graphical
Actively uses ICMP to constantly find the route taken by packets to a device and gather statistics about packet loss and timing. The cumulative timing is shown in a real time chart. Supports both IPv4 and IPv6.

Packet Crafting, Flooding and Capture Tools

Packet Generating Tools

These tools are used to send packets from your computer to another device.

Packet Generator
Craft and send IPv4 TCP, UDP, ICMP, CDP, ARP/RARP, RAW packets with full control over ethernet packet header parameters to any target. Scripting is available.

Packet Flooder
This is a UDP Traffic Generator that sends as many UDP packets as possible to a target. Randomizes UDP port and payload length. Supports IPv4 and IPv6.

Packet Capturing Tools

These tools are used to passively listen to incoming network packets.

Packet Capture
Passively listens to network traffic on a selected interface and records it in a file for review.

Passive Discovery
Passively listens to network traffic on your LAN and shows which computers are talking.

Email Tools

These tools are used to work with email SMTP servers.

Email Validate
Checks the validity of email addresses by talking with SMTP servers. Helps answer the question "Is this a real email address?"

Real time Blacklist Check
Contacts Real time Black List database servers using DNS to find out if an IP address is known for generating spam.

SMTP Server Tests
Use to send test email through SMTP servers. Supports plaintext and STARTTLS modes. Relay test tool does 17 common relay tests without actually sending email.

SNMP Tools

These tools are used to work with SNMP (Simple Network Management Protocol) versions 1, 2c and 3.

SNMP Core
A set of tools for working with MIBs and OIDs. Walk, WalkBulk, Get, GetNext, GetBulk, Set, Get Status, MIB Descriptions and OID conversion to and from a MIB. Add your own MIBS in SNMP Advanced.

SNMP Advanced
Displays list of load mib as a list, OID dump or a text tree. Add a new MIB, Routing Table Report, ARP Cache Report, Listening Ports Report, System Info Report.

SNMP Scanner
This tool looks across a range of IP addresses for devices with active SNMP v1 or v2c. Launched from SNMP Advanced.

SNMP Dictionary Attack
This tool uses brute force dictionary lookup techniques to find the community name for devices suspected of running SNMP v1 or SNMP v2c. Launched from SNMP Advanced.

Local Computer Tools

Tools that provide information about your computer.

ARP Cache
Lets you view and edit your computer's ARP Cache (ARP Table).

Cache Forensics
Two tools to view Microsoft Internet Explorer cache, history, cookies and view Protected Storage Contents for your account on your computer.

IP/MAC Address Management
A centralized place to maintain a history IP/MAC addresses in a database. A persistent ARP Cache.

Launcher
Launches Telnet, FTP and web browser applications from one place.

Network Interfaces and Statistics
Shows network interface details including IPv4 and IPv6 information.

Network Interfaces - Wireless
Shows wireless network interfaces and details like SSID, BSSID, signal strength.

Network Connection Endpoints
Shows a list of TCP/UDP listening ports with the owning executable processes. Includes a TCP Connection Killer.

Network Neighbors
Shows the IPv6 Network Neighbors table - similar to the IPv4 ARP Cache except for IPv6.

TimeSync
Sync your computer clock with Network Time servers using NTP protocol. Sync function also available from the command line.

Winsock Info
Shows sockets layer network interface details of your system.

About Window and General Program Overview
Information about the App.

Network Reference Tools

These tools are great reference sources for a network engineer.

Country to IPv4, IPv6 or ASN
Finds the IPv4 or IPv6 addresses or ASNs assigned to a country.

IP Address to Country
Finds the physical location of IPv4 addresses at the country level.

RFC Reference
A reference library of RFCs (request for comment memos) used to describe protocols accessed by this software.

Service Lookup
Lookup TCP/UDP port numbers using the local services database.

Subnet Calculator
A tool network engineers use to calculate IPv4 subnet mask parameters.

Whois
A whois client supporting over 100 domain extensions. Includes a rwhois protocol client. Bulk/batch whois queries are also supported. Does domain**, IPv4, IPv6 global and ASN queries to whois servers around the world.

**Note: Whois data has been severely impacted as of May 2018 by the EU GDPR meaning most useful information is now redacted and has been classified as private. You will find the domain lookups to be the most impacted. IP Address and ASN lookups are still largely unaffected by GDPR.

Network Testing Tools

These are miscellaneous network testing tools.

OS Fingerprinting
Experimental ICMP based method of determining a target's Operating System remotely. Note: we are currently evaluating the continued inclusion of this tool in NetScanTools Pro. It is based on ICMP techniques and will not give OS identifications as accurate as those provided by nmap. If you want the best, use nmap for OS Fingerprinting.

Simple Services
A combined Chargen, Daytime, Echo, and Quote protocol client.

SMB Scanner
Retrieves SMB versions supported by a target.

SSL Certificate Scanner
Scan a list of Secure Web Servers and retrieve their SSL Certificates for review. Tests for weak SSLv2 connections too.

TCP Term
Simplified Telnet-like client utility.

Text Only Web Page Viewer
A safe text based URL web page viewer. Shows hidden web page headers.

TTCP
Test network speed using client/server methods.

Wake-On-LAN (WOL)
Remotely 'wake up' one or more sleeping computers.

Automated Test Tools

The Automated Tools accept an input, then work several manual tools for you to produce a report.

Automated Research
Get a report about an IP address, hostname, domain name, email address or web URL without having to operate the manual tools.

IPv6 Enabled Tools

These tools listed below support IPv6.

Country to IPv4, IPv6 or ASN
Shows the IPv6 addresses assigned or allocated to a country.

DNS Tools - Core
Simple Query does hostname to IPv6 address lookups and vice versa. NSLOOKUP and DiG retrieve AAAA records from DNS. Example: ipv6.google.com

DNS Tools - Advanced
IP or Hostname to ASN finds the Autonomous System Number for an IPv6 address.

Network Interfaces and Statistics
Shows network interface IPv6 details.

Network Neighbors
Shows the IPv6 Network Neighbors table that is populated using ICMPv6 Neighborhood Discovery Protocol.

Packet Capture
Can capture and identify IPv6 packet traffic.

Packet Flooder
Sends as many UDP packets as possible to a target using IPv6.

Ping - Enhanced
Ping devices with ICMPv6 packets and show the response time to our ping packets. Both Ping and Traceroute work with native IPv6 or tunneling methods like Teredo or 6to4.

Traceroute
Supports IPv6 traceroute using ICMPv6.

Traceroute - Graphical
Supports IPv6 traceroute using ICMPv6.

Whois
Our whois client can lookup IPv6 Globally Unique Unicast addresses and show you who owns them.

Legacy Network Tools

The legacy tools have been here since NetScanTools started. Although the protocols they work with may no longer be supported, they are kept in the toolset in case you need them.

Finger
This client can check an email address by contacting a finger server -- that is, if you can still find one.

Simple Services
A combined Chargen, Daytime, Echo, and Quote protocol client.