NetScanTools® Pro
delivers a powerful set of network tools into your hands

There are many Active Discovery and Diagnostic Tools that you can use to locate and test devices connected to your network. Active discovery means we send packets to the devices in order to obtain responses.

The Passive Discovery Tools are used to find information from third parties or to monitor the activities of devices connected to your network. Passive discovery means that we listen to packets other devices send in order to obtain information about the devices.

The DNS Tools are very versatile and help you find problems with DNS. The DNS tools are divided between 'Core' and 'Advanced' toolsets. Version 11 introduced IPv6 specific DNS tools.

These tools provide information about your local computer's network and also include general information tools that are not easily categorized.

• Click here for more details about the tools mentioned below.
• Powerful Core DNS Tools. Specify the DNS you want to work with. Use NSLOOKUP or DiG to retrieve any of 48 resource record types from a DNS. Use DiG +trace to check a domain name or IP address from the root servers all the way down to the authoritative DNS. Batch mode accepts a text list of IP addresses or hostnames and gives you the answers for all.
• Quickly find the most common DNS records for an IP address or hostname or domain name. Get Basic DNS Records gives you SOA, A, AAAA, NS, MX, CNAME, PTR, and TXT records from DNS using a single button push.
• Check a Domain's Zone in DNS. Two types of Zone Transfer give you the ability to review a zone. One automatically selects the Authoritative DNS for the zone and the other lets you enter the DNS manually.
• Powerful Specialized DNS Tools. We have specialized DNS tools for doing things you cannot do with NSLOOKUP. Auth Serial Check can be used to make sure a domain's authoritative name server zone serial numbers are in sync. DNS S/W Version may show the actual software version number a DNS is running (if they allow it). DNS Verify does an IP to Hostname to IP mapping check. IP Drilldown takes an IPv4 address and shows the arpa namespace records (SOA, NS, TXT, A etc.) for all 4 levels of an IPv4 address. ENUM accepts a VOIP telephone number and queries an ENUM e164 root server for the SIP or H323 records. SPF/Domain Keys shows those records for domain so you can check email authentication processes. Batch mode accepts a text list of IP addresses or hostnames and gives you the answers for all.
• Test your computer's default DNS settings. Your default DNS settings define which DNS's process IP address or hostname lookups during things like web browsing - The Test Default DNS tool talks directly to each default DNS your computer is using and tells you if it is working and how fast it is. We have a Simple Query tool for testing your computer's ability to lookup an IPv4 or IPv6 address or hostname.
• Find out who owns a domain name or an IP address fast with our advanced whois and rwhois query tools that feature automatic whois server selection. Need to lookup several domains quickly? Batch mode is there for you.
• Where is an IP address located? Our IP to Country tool can show you the country it is supposed to be located in. This feature is also integrated into whois and traceroute.
• Find active devices in any IPv4 address range using our ping scanner utility (also called NetScanner).
• Find hidden IPv4 devices on your local network segment or subnet (LAN). ARP Scan exposes hidden devices that do not respond to ping.
• Find the SMB versions supported by other computers. The SMB Scanner takes a list of IPs or hostnames and shows the SMB versions supported by the target.
• Find visible, hidden and writable shares in a Microsoft Windows Domain. Network Shares uses SMB/CIFS/NetBIOS to show visible and hidden shares. It can do a writable share test find shared directories exposed to attacks by worms and viruses.
• Find open TCP or UDP ports on a device. The Port Scanner tool uses several different methods to determine if a TCP or UDP port is open or active  on a target machine.
• Display your DHCP Server offerings, check for misconfigured offering and find rogue DHCP Servers using the DHCP Server Discovery tool.
• Find the route packets are taking from your machine to a target machine. Traceroute includes the firewall penetrating TCP traceroute plus standard ICMP and UDP traceroute methods. Traceroute now supports IPv6 targets.
• Validate an Email Address. Email Address Validation can tell you if an email address will work.

• Test SMTP email servers. Send test mail and check for an Open Relay.
• Capture packets from your network. Packet Capture lets you see networks packets going through your wired ethernet interface or wireless 802.11a/b/g/n interface. Preserves packet data for future analysis and export packet captures to other analysis tools like WireShark.
• Gather data from network devices using our Simple Network Management Protocol (SNMP) tools. SNMPv1/v2c/v3 tools include walk, get, set and several advanced queries such as remote ARP cache, remote listening ports and more. The SNMP Dictionary Attack tool can try to guess the community name of an SNMP enabled device.
• Find and keep track of IP/MAC Address Mappings. IP and MAC address associations found using NetScanner, ARP, SNMP, and SMB can be automatically updated and maintained in the IP/MAC address management database.
• Numerous useful utilities like Subnet Calculator, TTCP for network speed checking, Ping, ARP Ping, and safe URL web page capture with obscured URL decoding.
• Map Network Switches (optional). The optional Manage Switch Port Mapping tool works with many brands of SNMP enabled managed ethernet network switches to discover and show devices connected to the physical switch ports.

• Click here for more details about the tools mentioned below.
• Find hidden IPv4 devices on your local network segment (LAN). ARP Scan shows all active IPv4 connected devices even if those devices have an integrated firewall protecting them from standard ping sweep or port scan methods.
• Find IPv4 devices on any reachable network. NetScanner is a ping scanner that can find IPv4 connected devices on any reachable IPv4 network.
• Find devices listening to network traffic on your local network segment (LAN). Promiscuous Mode Scanner shows devices listening to (snooping/sniffing) network packet traffic.
• Check a device for listening TCP or UDP ports. Port Scan checks for unauthorized or unintentionally installed services or open listening ports on IPv4 connected devices.
• Test the response of a device or firewall to TCP/UDP/ICMP or CDP packets. Packet Generator (TCP/UDP/ICMP/CDP/ARP/RAW) along with Packet Capture can assist in testing systems and firewalls for response to unusual customized packets. It can even send a 'RAW' packet completely of your own design.
• Find the SMB versions supported by other computers. The SMB Scanner takes a list of IPs or hostnames and shows the SMB versions supported by the target including the insecure, vulnerable SMB 1.0.
• Find visible, hidden and writable shares in a Microsoft Windows Domain. SMB/CIFS share detection shows visible and hidden shares. It can do a writable share test find shared directories exposed to attacks by worms and viruses.
• Find IPv4/IPv6 address owner or allocated business and what country they are from. Our advanced whois and rwhois query tool shows who owns the IP address showing up in your logs.
• Examine Internet Explorer caches (older versions only). Cache Forensics shows Internet Explorer history, cache and cookie information plus it shows Protected Storage information containing passwords and IE auto-complete data for the currently logged in user.
• Check for misconfigured SMTP servers. Email Address Validation and Open SMTP Relay Checking show configuration issues with SMTP servers.

• NetScanTools Pro is a great tool to help train people on the workings of various TCP/IP utilities. You can also use it to demonstrate security vulnerabilities and some of the common techniques used to map and access networks and machines.
• NetScanTools Pro is used in network security and reconnaissance or traceback training courses taught by Laura Chappell of the Protocol Analysis Institute.
• A "whitehat" toolkit used in "ethical hacking" training courses taught by SANS.