Best Free Network Analysis Tools

toggle-button

Introduction

Network analysis tools enable diagnosis of problems or allow exploration of all hardware on a computer network.

They generally fall into three categories:

  • Packet analyzers allow capture and display of individual messages being processed by your computers network card;
  • Port scanners are designed to probe other computers or network devices on a network and report interesting information;
  • Hardware scanners investigate what is on the network and report back what it finds.

The key difference between what a port scanner does versus a hardware scanner is the area it is scanning. Port scanners only focus on ports that are open and they sometimes attempt to see what is listening to that port on that device.

Hardware scanners on the other hand are more intelligent and look at the bigger picture of what the purpose of that device is and how it is interacting on the network.

All of these tools are invaluable for those wanting to learn about networking or just want to investigate what is on their network and what each device is doing.

 

Rated Products

Wireshark  

An established premier packet analyzer


Our Rating: 
4.5
License: Free (Open source)
De-facto packet analyzer, captures packets of standard ethernet, PPP and VPN interfaces.
n/a.
Read full review...

Nmap  

A free and open source tool for network discovery and security auditing


Our Rating: 
4.5
License: Free (Open source)
Scans an individual IP address or multiple addresses, reports on open ports, interesting information and the likely type of device/operating system. Has both a GUI and Command Line interface.
n/a.
Read full review...

Angry IP Scanner  

A lightweight program to scan a range of IP addresses


Our Rating: 
4
License: Free (Open source)
Very lightweight, allows to quickly scan a range of IP addresses.
Provides less information and options than Nmap.
Read full review...

Will Data Be Visible To Connected Devices?

One thing to keep in mind when using tools like these, for network analysis, is that if the network devices are connected together, through switches instead of hubs, the data will not be visible to all connected devices. Switches route data from a specific device to another specific device.

Tools like WinPcap that listen on the network card, for traffic flowing through that card, are not going to see traffic on the network unless it has been specifically targeted for that machine running WinPcap.

Think of it this way; there may be 8 lanes of traffic on a highway but there are 20 foot barriers between each lane and each lane only takes you to one specific exit. This example shows that although you are only a few feet from other traffic you are unable to see the cars to the left or right and you have no idea where they are going. That is exactly the way a switched network operates. If you are listening to traffic on a particular computer or server and expect to see a representation of all traffic you are not going to get what you are looking for.

 

Related Products and Links

You might want to check out these articles too:

 

Editor

This software category is in need of an editor. If you would like to give something back to the freeware community by taking it over, check out this page for more details, or contact us by clicking here.

Back to the top of the article

 

Please rate this article: 

Your rating: None
4.26316
Average: 4.3 (19 votes)