Network Forensic Analysis Tool (NFAT)
NetworkMiner is a Network Forensic Analysis Tool (NFAT) for Windows (but also works in Linux / Mac OS X / FreeBSD). NetworkMiner can be used as a passive network sniffer/packet capturing tool in order to detect operating systems, sessions, hostnames, open ports etc.
NetworkMiner captures network packets and then parses the data to extract files and images
helping you to reconstruct events that a user has taken on the network – it can also do this by parsing a pre-captured PCAP file.
You can enter keywords which will be highlighted as network packets are being captured.
NetworkMiner is classed as a Network Forensic Analysis Tool (NFAT) that can obtain information such as hostname, operating system and open ports from hosts.