Here are some highlights of why RawCap is a great tool to have in your toolset:
- Can sniff any interface that has got an IP address, including 127.0.0.1 (localhost/loopback)
- RawCap.exe is just 17 kB
- No external libraries or DLL’s needed
- No installation required, just download RawCap.exe and sniff
- Can sniff most interface types, including WiFi and PPP interfaces
- Minimal memory and CPU load
- Reliable and simple to use
Depois de gerar o arquivo ,pcap, importe ele para o Wireshark e vuolá! O mesmo fica salvo por padrao na pasta system32.
Visitem os ite da ferramneta: http://www.netresec.com/?page=RawCap
You can download RawCap.exe here.