Thousands of network professionals rely on NetScanTools® Pro to solve their daily network problems. We give you a powerful set of network tools - and version 11 puts them into a new interface. Need IPv6? version 11 introduces our first IPv6 specific tools. Explore the tools >> See tool videos >> Download a free demo >>

Version 11 slideshow

What is NetScanTools Pro?

NetScanTools Pro is an integrated collection of internet information gathering and network troubleshooting utilities for Network Professionals. Research IPv4/IPv6 addresses, hostnames, domain names, email addresses and URLs automatically** or with manual tools. It is designed for the Windows operating system.

**Automated tools are started interactively by the user. By Automated we mean that several tools are used to do research, then the results are presented in your web browser.

Benefits

• Saves time when you need to gather information about Internet or local LAN network devices, IP addresses, domains, device ports, and many other network specifics.
• Simplifies and speeds up the information gathering process by Automating the use of many network tools for you. You enter an IP and press one button to use many tools. You sit back and watch.
• Produces clear, concise results reports in your web browser.
• Greatly enhances many familiar network tools.
• At $249, NetScanTools Pro represents the best value of any investigative tool! Our new license cost (which includes one year maintenance) is less than the over $395 yearly maintenance cost for another well known network engineer's toolkit.
• Also available as a USB Flash Drive portable application -- ($299) and is preinstalled on a fast 8GB USB Flash Drive with plenty of space for other great tools like Wireshark® Portable or NMAP.

Active Discovery and Diagnostic Tools

There are many Active Discovery and Diagnostic Tools that you can use to locate and test devices connected to your network. Active discovery means that we send packets to the devices in order to obtain responses.

ARP Ping ARP Scan (MAC Scan) DHCP Server Discovery Email Validate Finger Network Shares - SMB Network Routing Visualizer OS Fingerprinting Packet Flooder (UDP Traffic Generator) - new in v11 Packet Generator (tcp, udp, icmp, cdp, raw) Ping - Enhanced (IPv4/IPv6)

Ping - Graphical Ping Scanner (AKA NetScanner) Port Scanner Promiscuous Mode Scanner *nix RPC Info Simple Services SMTP Server Tests SNMP Core and Advanced System Info - SMB Text Only Web Page Viewer Traceroute TTCP

Passive Discovery Tools

The Passive Discovery Tools are used to find information from third parties or to monitor the activities of devices connected to your network. Passive discovery means that we listen to packets other devices send in order to obtain information about the devices.

Connection Monitor Network Connection Endpoints Packet Capture

Passive Discovery Real Time Blacklist Check Whois (accepts IPv4, IPv6, Domain Name or ASN queries)

DNS Tools

The DNS Tools are very versatile and help you find problems with DNS. The DNS tools are divided between 'Core' and 'Advanced' toolsets. Version 11 introduced IPv6 specific DNS tools.

DNS Tools - Core nslookup - 48 resource record types Dig - 48 resource record types Dig+trace - shows delegation path Get Basic DNS Records - SOA, A, AAAA (IPv6), NS, MX, CNAME, PTR, TXT Zone Transfer - automatic or manual server selection Default System DNS Tools Simple Query - IPv4/NetBIOS names Simple Query - IPv6 Who Am I? Test Default DNS Flush Default DNS Cache Edit DNS HOSTS File

DNS Tools - Advanced Auth Serial Check - checks the serial of each authoritative server DNS Software Version DNS Verify IP Drilldown - shows NS for each class of IPv4 ENUM SPF/Domain Keys DNS List Speed Test IP or Hostname to ASN (IPv4/IPv6) Get VOIP SRV Records Get Misc SRV Records

Local Computer and General Information Tools

These tools provide information about your local computer's network and also include general information tools that are not easily categorized.

ARP Cache Cache Forensics (URL Cache Viewer and Protected Storage Viewer) IP to Country IP/MAC Address Database Launcher MAC Address to Manufacturer

Network Connection Endpoints Network Interfaces and Statistics Network Interfaces - Wireless Service Lookup Subnet Calculator - IPv4 TimeSync Wake On LAN Winsock Info

Installed or Portable USB Flash Drive Versions

Your two choices:

"Installed" version on your desktop and laptop. The license allows for the software to be installed on those two computers as long as you are the primary user of both. The software is typically supplied as a 'download' and it is available on CDROM if required.

"USB" fully portable version. The software is pre-installed on a fast USB flash drive that we supply. You can use it on any Windows 7/Vista/XP/2008/2003 system that has a USB 2.0 port. Windows 7/Vista/2008 will require 'Run as administrator' privileges to use the software. The software is licensed to the USB flash drive and if you need to transfer it to a different drive you will need our assistance. Read more about the USB version.

Multiple Solutions in one package

• A Network Information Gathering, Reconnaissance and Discovery Solution

  • Powerful Core DNS Tools. Specify the DNS you want to work with. Use NSLOOKUP or DiG to retrieve any of 48 resource record types from a DNS. Use DiG +trace to check a domain name or IP address from the root servers all the way down to the authoritative DNS. Need to work with a list of IP addresses or hostnames? Batch mode accepts a text list of IP addresses or hostnames and gives you the answers for all.

  • Quickly find the most common DNS records for an IP address or hostname or domain name. Get Basic DNS Records gives you SOA, A, AAAA, NS, MX, CNAME, PTR, and TXT records if they exist in DNS.

  • Check a Domain's Zone in DNS. Two types of Zone Transfer are ready for you for help you review a zone. One automatically selects the Authoritative DNS for the zone and the other lets you enter it manually.

  • Powerful Specialized DNS Tools. We have specialized DNS tools for doing things you cannot do with NSLOOKUP. Auth Serial Check can be used to make sure a domain's authoritative name server zone serial numbers are in sync. DNS S/W Version can show the actual software version number a DNS is running. DNS Verify does an IP to Hostname to IP mapping check. IP Drilldown takes an IPv4 address and shows the arpa namespace records (SOA, NS, TXT, A etc.) for all 4 levels of an IP address. ENUM accepts a VOIP telephone number and queries an ENUM e164 root server for the SIP or H323 records. SPF/Domain Keys shows those records for domain so you can check email authentication processes. Need to work with a list of IP addresses or hostnames? Batch mode accepts a text list of IP addresses or hostnames and gives you the answers for all.

  • Test your computer's default DNS settings. Your default DNS settings process IP address or hostname lookups - Test Default DNS tool tests each DNS your computer is talking with and tell you if it is working and how fast it is. We have a Simple Query tool for testing your computer's ability to lookup an IPv4 or IPv6 address or hostname.

  • Find out who owns a domain name or an IP address fast with our advanced whois and rwhois query tools that feature automatic whois server selection. Need to lookup several domains quickly? Batch mode is there for you.

  • Where is an IP address located? Our IP to Country tool can show you the country it is supposed to be located in. This feature is also integrated into whois and traceroute.

  • Find active devices in any IPv4 address range using our ping scanner utility called NetScanner.

  • Find hidden IPv4 devices on your local network segment or subnet (LAN). ARP Scan exposes hidden devices that do not respond to ping.

  • Find visible, hidden and writable shares in a Microsoft Windows Domain. SMB/CIFS share detection shows visible and hidden shares. It can do a writable share test find shared directories exposed to attacks by worms and viruses.

  • Find open TCP or UDP ports on a device. The Port Scanner tool uses several different methods to determine if a TCP or UDP port is open or active  on a target machine.

  • Display your DHCP Server offerings, check for misconfigured offering and find rogue DHCP Servers using the DHCP Server Discovery tool.

  • Find the route packets are taking from your machine to a target machine. Traceroute includes the firewall penetrating TCP traceroute plus standard ICMP and UDP traceroute methods.

  • Validate an Email Address. Email Address Validation can tell you if an email address will work.

  • Test SMTP email servers. Send test mail and check for an Open Relay.

  • Capture packets from your network. Packet Viewer captures packets coming to your wired ethernet card. Preserve packet data for future analysis and export packet captures to other programs like WireShark.

  • Gather data from network devices using our Simple Network Management Protocol (SNMP) tools. SNMPv1/v2c/v3 tools include walk, get, set and several advanced queries such as remote ARP cache, remote listening ports and more. The SNMP Dictionary Attack tool can try to guess the community name of an SNMP enabled device.

  • Find and keep track of IP/MAC Address Mappings. IP and MAC address associations found using NetScanner, ARP, SNMP, and SMB can be automatically updated and maintained in the IP/MAC address management database.

  • Numerous useful utilities like Subnet Calculator, TTCP for network speed checking, Ping, ARP Ping, and safe URL web page capture with obscured URL decoding.

  • Map Network Switches. The optional Manage Switch Port Mapping tool works with many brands of SNMP enabled managed ethernet network switches to show devices connected to the switch ports.




• A Security Testing Solution

  • Find hidden IPv4 devices on your local network segment (LAN). ARP Scan shows all active IPv4 connected devices even if those devices have an integrated firewall protecting them from standard ping sweep or port scan methods.
  • Find IPv4 devices on any reachable network. NetScanner is a ping scanner that can find IPv4 connected devices on any reachable IPv4 network.
  • Find devices listening to network traffic on your local network segment (LAN). Promiscuous Mode Scanner shows devices listening to (snooping/sniffing) network packet traffic.
  • Check a device for listening TCP or UDP ports. Port Scan checks for unauthorized or unintentionally installed services or open listening ports on IPv4 connected devices.
  • Test the response of a device or firewall to TCP/UDP/ICMP or CDP packets. Packet Generator (TCP/UDP/ICMP/CDP/ARP/RAW) along with Packet Viewer can assist in testing systems and firewalls for response to unusual customized packets. It can even send a 'RAW' packet completely of your own design.
  • Find visible, hidden and writable shares in a Microsoft Windows Domain. SMB/CIFS share detection shows visible and hidden shares. It can do a writable share test find shared directories exposed to attacks by worms and viruses.
  • Find IPv4/IPv6 address owner or allocated business and what country they are from. Our advanced whois and rwhois query tool shows who owns the IP address showing up in your logs.
  • Examine Internet Explorer caches. Cache Forensics shows Internet Explorer history, cache and cookie information plus it shows Protected Storage information containing passwords and IE auto-complete data for the currently logged in user.

  • Check for misconfigured SMTP servers. Email Address Validation and Open SMTP Relay Checking show configuration issues with SMTP servers.
    




• A Training Solution

  • NetScanTools Pro is a great tool to help train people on the workings of various TCP/IP utilities. You can also use it to demonstrate security vulnerabilities and some of the common techniques used to map and access networks and machines.
  • NetScanTools Pro is used in network security and reconnaissance or traceback training courses taught by Laura Chappell of the Protocol Analysis Institute.
  • A "whitehat" toolkit used in "ethical hacking" training courses taught by SANS.

Videos

We have a number of demonstration videos showing both NetScanTools Pro Version 11 and the older NetScanTools Pro version 10.x in action.

Please review our videos.

Demo

Our current demo is based on the older version 10.x but we plan on creating a demo based on v11 sometime in May. The demo has a fixed expiration date.

Get the NetScanTools Pro demo here.

Licensing and Pricing

• Installed version is licensed by computer. You may install one license on one desktop and on one portable computer as long as you are the primary user of both computers. Installed version is available by download or on CDROM.
• USB version is not installed on any computer, so it is licensed to the user and may not be copied to additional USB flash drives without our permission and assistance. It may be used on any number of computers, one at a time, and not simultaneously. This fully portable USB Flash Drive version that does not require installation.
• Installed version $249 for a single license - includes one year maintenance plan. Buy a download of the Installed Version Now
• USB version is $299 for a license on a 8GB USB flash drive - includes one year maintenance plan.
• Detailed Pricing Options, upgrade pricing and discounts we offer.
• Frequent releases (updates). 6 releases in 2010. 7 releases in 2009. Six releases in 2008. There were six (6) NetScanTools Pro releases in 2007 and five (5) releases in 2006. -- an active maintenance plan is required to get updates. The one year maintenance plan is included with a new license or upgrade.