Table of Contents
Version 0.9.7.4
Changes from the previous version:
-
New feature: The WMI Scan has a new method, Win32_LoggedUser, that can be used to find the name of logged user on the scanned computer;
-
Update: System info displayed correctly for Vista and Server 2008;
-
Fix: Fixed a problem with manual authentification for WMI Scan;
-
Fix: Fixed a problem where SYN Scan and DNS Scan caused application crash if used as primary or single discovery methods (this bug only appeared in 0.9.7.2).
Version 0.9.7.2
Changes from the previous version:
-
New feature: check for updates;
-
New scan mode: Hunt mode;
-
Update: documentation update.
Version 0.9.6.3
Changes from the previous version:
-
Update: Multiple DNS names are accounted. WARNING: the format of the XML file is changed because of this;
-
Update: DNS can be used in the Discovery phase;
-
Update: DNS solves IPv6 addresses;
-
Update: Some small speed improvments;
-
Update: The MAC Lookup tool is now searching in the ARP cache too;
-
Update: The ARP cache file (arpCache.dat) is for IPv6 too. WARNING: the format of this file is changed;
-
Update: Improved and updated MAC class (vendor) description;
-
Update: Added some icons for CHScanner;
-
Update: Added the "Delete" button for deleting scan configurations;
-
Update: Skins. The field "TextColor" has the desired effect;
-
Update: Documentation update;
-
Fix: The partially incorrect interpretation of the response to an IGMPv3 query packet.
Version 0.9.6.2
Changes from the previous version:
-
New method added: Shutdown/Reboot for Windows hosts;
-
New method added: IGMP Scanning;
-
Change: The assignments for ports and protocols are moved in a file;
-
Update: Documentation update;
-
Update: The exported file contains the MAC vendor and the assignment of IPv4 multicast addresses;
-
Update for Passive scanning. New analyzed packet type: STP;
-
Update for Passive scanning. New analyzed packet type: GARP/GMRP;
-
Update for Passive scanning. New analyzed packet type: GARP/GVRP;
-
Update for Passive scanning. New analyzed packet type: IGMP (v1, v2 and v3);
-
Update: Updated the IPv6 scanning methods with the changes specified in RFC 4443;
-
Update: The scan method IPv4 Ping Broadcast was rebuilded for a small speed increase;
-
Update: In WMI scan results, some, computed, general info are displayed on primary nodes (total memory, uP+freq, ...).
Version 0.9.5.4
Changes from the previous version:
-
New: Added a window for the general behaviour configuration;
-
New: Added beep on completion using the Window's "Default Beep" sound. Inhibited for automatic work mode;
-
Update: Added the total number of total users and groups in "Details" window and in the exported ".xml" files;
-
Update: Added string formating to replace the '&' character with "&" in exported ".xml" files;
-
Update: Important documentation updates.
Version 0.9.5.2
Changes from the previous version:
-
New method added: information gathering through WMI.
Version 0.9.4.12
Changes from the previous version:
-
New method added: IPv6 Protocols (obeys as much as possible Operating System Mimic);
-
New: Added the scriptable ability. By using command line parameters, the application can start in automatic scanning mode,
including passive scanning mode, and exports the results when done;
-
New: In automatic mode, the application will log a message using
Windows Event Log
, containing the result code;
-
New: Added the MAC Lookup function which is accesible by clicking the "Tools" button;
-
New: Added the Reset Layout function which is accesible by clicking the "Tools" button;
-
New: Added the Minimize button;
-
Update: "XML Export" of passive scanning results;
-
Update: Passive scan forces data display updating every 1 minute, even if nothing has happened since the last update;
-
Update: Improvements of data display;
-
Update: Documentation updates;
-
Update: The ARP Discovery phase was renamed as MAC Discovery phase, which is more correct;
-
Fix: In "Passive Scan Mode", if the previous selection is "Global Info", the selection will be preserved and the "Details" window will be updated;
-
Fix: Fixed the lack of displaing and exporting of IPv6 XMAS, IPv6 FIN and IPv6 NULL scan results;
-
Fix: Fixed the incorrect version number of CHScanner in the .xml export files.
Version 0.9.3.17
Changes from the previous version:
-
Update: For the "Find DHCP Servers" method has been added the ability to accept user-supplied parameters. The
grammar is like this:
- params: [macAddress [requestedName]]
- macAddress: * || aa:bb:cc:dd:ee:ff || aa-bb-cc-dd-ee-ff
- requestName: * || user-suppliedName
-
Mimic update: Added mimic informations for
OpenSolaris (Nevada 35)
;
-
Update: If a scan method is aborted the reason is displayed;
-
Update: In the main screen, along with the IPv4 address is displayed the IPv6 address;
-
IPv6 Scan update: For an IPv6 multicast address the MAC is added automatically, according to RFC 2464;
-
Fix: The fact that a few methods were not been able to stop at user's request;
-
Fix: Number of maximum parallel scans for the "ICMP - Ping Sweep" and the "IPv6 ICMP - Ping Sweep" is taken from the "Max.Sim.Scan" parameter and NOT from "Max.Sim.Scan ICMP" parameter;
-
Update: Passive scanning is rebuilded almost from zero. Beside counted packets, analyzed packets are:
- ARP
- TCP/IP: SYN | ACK
- TCP/IPv6: SYN | ACK
- UDP: DNS query response
- UDP: NTP server response
- UDP: SSDP
- IPX
Version 0.9.2.3
Changes from the previous version:
-
New method added: IPv6 TCP UDP Send;
-
New method added: IPv6 TCP ACK;
-
New method added: IPv6 TCP XMAS;
-
New method added: IPv6 TCP NULL;
-
New method added: IPv6 TCP FIN;
-
New method added: IPv6 TCP SYN;
-
New method added: IPv6 ICMP Ping Sweep;
-
New method added: IPv6 Multicast Listener Discovery;
-
New method added: Neighbor Discovery;
-
Method update: IPv6 Ping Broadcast - accepts user-supplied destination IPv6 addresses;
-
Method update: IPv6 Ping Broadcast - changed Ethernet broadcast address as specified in RFC 2464;
-
Method update: IPv4 Ping Broadcast - added two new destination address specification shortcuts for
the 224.0.0.1 and 224.0.0.2 multicast addresses;
-
Improved the display of IPv6 addresses;
-
Update for the style sheet file;
-
Fix: Fixed the incorrect generation of the first swapped number in OS Mimic;
-
Documentation update.
Version 0.8.1.983
Changes from the previous version:
-
New method added: IPv4 Ping Broadcast;
-
Fix: Fixed the incorrect display of IPv6 addresses;
-
Fix: Fixed the "size not memorized" problem of Select window;
-
Documentation update.
Version 0.8.1.980
Changes from the previous version:
- New method added: Find Promiscuous Nodes;
- New ARP Cache Table operation added: Update but NOT use ARP Cache Table;
-
Added the posibility of interface selection for hosts with multiple interfaces.
At start it selects the last one used;
- The size of the window that allows the user to select the scan configuration is memorized;
-
The type of combo boxes was changed from Dropdown to Drop List - it seems that I have set a wrong type for these or in
the conversion process from Visual Studio .Net 2003 to Visual Studio 2005 the type was changed;
-
Important documentation update (especially in the Scan Process page).
Version 0.8.1.961
Changes from the previous version:
-
Update of the code for Scan Job window:
- for each method the parameter name was added;
- for each method a short description was added.
-
Scan method Find DHCP Servers - reqested name is CHScanner.
Version 0.8.1.960
First "public" release. In this stage the application is, if not a mature product, at least an usable one.
Short description
CHScanner
is a network scanner application written in C++ using Visual Studio .NET 2003. Since version 0.8 I
have moved the solution to Visual Studio 2005.
One of it's unique features in the Operating System Mimic Tehnology. More about this will follow ...
The reason
Once upon a time I have written a very nice application for Windows. It was called a7Scanner NG
.
It has reached the version 0.9.1 when Micro$oft has released Service Pack 2 for Windows XP and blocked many features of
the XP's including sending raw packets with raw sockets.
I have worked hard to build that application and their changes have ruined it ... I was angry and disappointed...
I have talked with some of their peoples and realised that their policy is a STUPID one and I have considered the possibility
to newer write a line of code for Windows and use only Linux and Unix.
Changing the application to use WinPcap was the first idea but the actual process was too hard to implement.
However, a7Scanner NG
has reached the 0.9.1.13 version then I have decided to let it R.I.P.
Because I have gathered many knowledge about network protocols at their lowest level and the memories of a7Scanner NG
has haunted me, I have decided to do it again. And CHScanner
was born...
Copyright and License
This application is copyrighted (c) 2005-2008 by Calin Radoni.
Permission is granted to use and/or distribute this application.
Disclaimer
CHScanner is provided "as-is" WITHOUT ANY WARRANTY !
No liability for the behaviour of this application can be accepted. Use the application at your own risk !
There may be errors and inaccuracies that could be damaging to your system and/or network. Proceed with caution, the author
do not take any responsibility. The usage of this application in your country/region may be illegal !
All copyrights are held by their respective owners, unless specifically noted otherwise. Use of a term in this
document OR in application OR in the documentation that accompanies the application should not be regarded as affecting the validity of
any trademark or service mark. Naming of particular products or brands should not be seen as endorsements.