28 Oct 2000

What is FreeCap ?

FreeCap is packet capture and dump tool for WindowNT4.0.

How ?

  +-------------------------+
  |     FreeCap.exe (GUI)   |
  +-------------------------+
     |               ^ (Event)
     V(Manipurate)   |          -using COM (AKA OLE Automation)
  +-------------------------+
  |   MacCapV2.ocx (engine) |
  +-------------------------+
     |               ^ (Event)
     V(Manipurate)   |          -using DeviceIOControl
  +---------------------------+
  | NCapDD.sys (Packet Driver)|
  +---------------------------+
  | NDIS 3.0                  |
  +---------------------------+
  | MAC driver                |
  +---------------------------+

Why ?

I need it.
I've searched some capturing tools, but most of them are shareware. And complete free tool Gobbler is DOS only tool. Gobbler could not run under WindowNT's DOS VDM.

Where is FreeCap ?

Here! (Japanese Version - Install Shield Setup)
Here! (English Version - Manual Sestup Required)

How to install ?

If your NT box was already configured with Release1 of FreeCap, then you need to uninstall FreeCap and delete NCapDD.Sys.
1. uninstall freecap from control panel - application.
2. delete packet capture driver from control panel - network.
3. reboot the system to delete NCapDD.sys from the kernel memory.
English Version (FreeCapEng.zip)
1. See install.txt in the zip.

Where are the sources ?

Here!
You need NT DDK, if you would like to compile NCapDD.sys driver.
You need C++Builder4, if you would like to modify FreeCap.exe front end app. (I believe that C++Builder created files have DBCS charactes, so you must delete theses characters before loading into the IDE.)
You need VC++6SP2, if you would like to compile capture engine(MacCapV2.ocx). In this case, I've already deleted all DBCS characters from project files, so you can load it in your IDE directly.
If you would like to program your own front end (GUI part), you need some OLE-Automation compatible tools like Dephi, VB5...
There are some helps for you. These HTML files are sample scripts which show how to handle the objects. (You need IE5 to run them.) I wrote them in (broken) English only.

Copyright? Distribution condition ?

History

Oct 28, 2000

FreeCap update

FreeCap.Exe crush in Windows2000 when exiting appl.
Found and tested by Yuval Toledo, Thanks for your information.

May 13, 2000

Recompile update

MacCapV2 bugs.
NCapDD.Sys compatibility issue.
And something I forgot.

May 28, 1999

Add English Version

(In really, it's Japanese version with English font setting, and English letter captions), Thanks Alan.

May 11, 1999

New page for release 2.

May 5, 1999

I continue to change MacCap/NCapDD driver pair.

MacCap now loads NCapDD.sys dynamically.(no need to install driver) - Thanks Lewis, for your suggestion.
MacCap.dll changed its name to MacCapV2.ocx. So you can use it more easy (without COM knowledge).
Adding monitoring only ActiveX contorl in it.
NCapDD.sys stamps the packet recvtime more fine. (approximately 50micro sec)
I've deleted all MSDEV supplied useless MBCS comments. So you can open the MacCapV2 project file straight into your environment (maybe).

Jan. 25, 1999

I fixed some bugs and add some futures in FreeCap.exe.

change dump view, with colored fonts.
correct localtime.
replace Borland about-Icon with my own.
save packets summery with csv format

I changed MacCap.dll (Ok, Ok, I know it's COM violation, but...)

Append VendorCollection interace.
Append length properties on collections.

Jan. 15, 1999

I correct some bugs in FreeCap.exe.

sync pane button to tree view.
enabling copy and print buttons.

I modified MacCap.dll.

try to keep packets sequence.

Jan. 4, 1999

First release.

Back

Disclaimer Notice
THIS SOFTWARE IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.