With NetworkMiner you can extract images, files, certificates, and more from network packets that flow through your computer, allowing you to extract files and documents by analyzing network traffic automatically. You can also view live session details between your system and different sources, as well as traffic information.
Getting Started with NetworkMiner
- To extract the necessary files, the first thing you need to do is select a network adapter from the dropdown list. We have detected errors when selecting some adapters and have resolved them by restarting the program or running it in Administrator mode.
- Once you have selected the adapter to monitor, just click on Start. At this point the tool will begin scanning the entire network. After that, you will see all the files and documents found on the network, divided into categories such as Hosts, Files, Images, Messages, and Credentials. For example, to extract images, hover over the images and the path where the image is saved will be displayed; you can also open the image from the interface.
- To extract certificates, go to the Credentials tab and you can view and save certificates from all network sessions and websites. The platform also analyzes PCAP files; in our tests it has worked perfectly in detecting PCAP files. The utility regenerates sessions, DNS, parameters, keywords, messages, and hosts, as well as all the aforementioned information.
With this small guide you can download images, certificates, and files from network packets that flow through your computer. You can also analyze and receive PCAP files from a remote resource to analyze directly from the GUI. NetworkMiner is a very good program for scanning the networks on your computer, and although some adapters did not work in our tests and the scanning is quite slow, we recommend it.
NetworkMiner is a free program available for Windows, Mac OS X, and Linux. It is portable and does not consume system resources.
