13 thoughts on “Feedback

    1. I presume you are referring to the dialog “Microsoft Defender Smartscreen prevented an unrecognized app from starting…” that pops up when the installer is run the first time. The reason is simply that Nethor installer doesn’t¬†have enough reputation yet and partly because I have not purchased a certificate that will gain trust for Defender. You can safely bypass this by clicking “More info” and then the button “Run anyway”. Regarding viruses, there are two false positives if you check the software at virustotal.com that you can safely ignore. I hope this illuminates the issue.

  1. Hello, really enjoying trying out the product. I am noticing issues where the filters do not seem work… for example Wireshark find PTP but Nethor does not.

    1. I am pleased that you like Nethor and thanks for pointing out the issue with Precision Time Protocol. I am not familiar with this protocol but from reading Wikipedia, I learned that it operates over UDP on ports 319 and 320. Nethor has filter terms “ptp-event” and “ptp-general” respectively but there is a bug. Those terms are in conflict with another term, “ptp” (IP protocol 123, Performance Transparency Protocol). I will fix this in next release.
      Temporary solutions are either open file “IpProtocols.xml” and rename the alias “ptp” for protocol 123 to “ptp2”, or use filter expression: “udp.src == 319 OR udp.src == 320 OR udp.dst == 319 OR udp.dst == 320”.

  2. Huge amount of work for a sole dev. Remarkable packet playback feature. I suggest you a more event or flow centred approach ( e.g. like Brim, CapLoader, Network Miner and Colasoft Capsa Enterprise). Kind of classic (old fashioned) GUI. Do you plan to monetise it eventually?

    1. Yes, I have spent a while coding, but I also have a lot of spare time. Thanks for pointing out about an event based engine. I am not sure where to begin. I must study the apps you mentioned, and maybe get some ideas. I have no plan to license Nethor. I will keep it as freeware. To cover the cost of food and coffee, I may eventually set up a goodwill based donation button. Again, thank you for the feedback!

      1. Hey Are Taraldsen,
        if you want to keep it free, maybe you can give us the source code?
        Thank you for all the efforts and please set up a donation button ūüėÄ
        Best
        prk0ghy

  3. Remarkable application, wonderful user experience and intuitive, practical and wonderful interface. However, would it be possible to append a greater selections of IP Telecommunication Protocol decodes,, SCTP, SIP, HTTP2/JASON, including LTE and 5G transport related decodes, as in Wireshark

    1. Uplifting words! Thank you. I will look into these protocols eventually. I must point out I possess no former experience with any. If anyone can share me packets it would help a lot.

Leave a Reply