Atelier Web Ports Traffic Analyzer is a network traffic sniffer and logger that allows you to monitor all internet and network traffic on your PC and view the actual content of the packets, showing you exactly what was transmitted and to where.
This includes all traffic initiated by software products, web sites etc. The capability to audit what flows in and out of every piece of software is critical for security aware users.
AWPTA installs a Layered Service Provider (LSP) over the base transport protocols for the AF_INET address family. You can confirm the LSP existence with Atelier Web Security Port Scanner (in the IP/Transport Protocols page).
All data sent or received using the Winsock services and the mentioned base protocols passes through the LSP and can be analyzed and captured.
AWPTA captures almost all data (except data sent and received using NT specific extensions, due to the heavy burden involved. They are not very common, anyway).
AWPTA reports all open ports, even if not listening or connected yet and no data has been sent or received! There is no other sniffer that can do that! AWPTA reports the exact number of data bytes sent and received by every process.
Bear in mind that AWPTA does not capture data sent over base protocols other than the ones mentioned (for instance NetBIOS related packets are not captured).
Also, Netbt.sys, a kernel-mode driver, opens UDP ports 137, 138 and TCP port 139 directly to the TDI interface (bypasses Winsock). This implies that you will not see what file has opened these ports.
Here are some key features of "Atelier Web Ports Traffic Analyzer":
· Real-time mapping of ports to processes (applications and services)!
· History since boot-time of all TCP, UDP and RAW ports open through Winsock and respective mapping to processes!
· Log since boot-time of data sent and received (up to 500 MB) by above ports!
· Sophisticated archiving feature allowing to review previous sessions with the same detail as the current session.
Limitations:
· 15 days trial or 15 uses trial
What's New in This Release: [ read full changelog ]
· On some machines the application produced an access violation when the Install Provider button was pressed.
· IP-To-Country database has been updated and covers nearly 60,000 IP ranges translating to more than 2.9 billion IP addresses.
