Ufasoft
Description.
This software is designed to intercept ICQ, IRC and email messages across a LAN. It is possible to observe these messages in the same time the real users will receive it. All intercepted messages are stored in files, which can be later processed and analyzed. There are two versions for your convinince IcqSnif with GUI, and concole only IcqDump. The functionality is the same, except it is possible to select which machines to arp-spoof exactly in the GUI version. The software is based on the relieble and well-known Ufasoft Sniffer engine.
The software will intercept all messages available on the network adapter.
There are two possible network designs implemented on your LAN: 1. Ethernet HUB hardware In this case all messages for all computers connected to the same HUB can be intercepted with your network adapter. There is no need to use an arp-spoof technique. 2. Ethernet Switch hardware. In this case you will see messages addressed only to you. This is why we decided to implement arp-spoof technique to allow the sniffing of messages of other computers connected to the same ethernet switch.
IcqDump command-line options.
icqdump [-D] [-a] [-i iface] [-r file] [expression]; -A: enable arp-spoofing -h: show this help -D: show interfaces -i: listen to the specified interface number (all interfaces are intercepted by default) -r: read packets from a file created with tcpdump -s option expression: tcpdump alike BPF-filter