Release Notes

Version 2023.1.0 (2023-09-15)

  • New layouts: Matrix I/O and Matrix Flow
  • New specialized layout: Custom. Build your own layout
  • Flow Chart has now the ability to drag and reorder columns
  • A new feature in the Matrix: Store and reload your preferred arrangement of nodes
  • Findbox now supports coherent hex strings (without spaces or separators)
  • Bug fix: Ability to toggle visibility of panes, available from the View main menu, was not working
  • Bug fix: When loading certain PCAPNG files, following error occurred: The added or subtracted value results in an un-representable DateTime
  • GUI improvements
  • Some minor bug fixes

Version 2023.0.0 (2023-01-10)

A new loop feature is added to the Timeline module. You can now, with ease, set an arbitrary length loop for packet playback use. Commands are accessible from the context menu (right-click menu). The loop tags are draggable.

Version 2022.1.0 (2022-06-15)

  • New function in Matrix module: Center high density nodes
  • 3 new categories in Top Ten module
  • Some GUI improvements
  • Some minor bug fixes

Version 2022.0.0 (2022-03-01)

  • Added a simple toolbar for the Timeline module
  • Added toolbars for the Matrix and World modules
  • Added a “Restart Capture” function
  • Added “Show in Folder” column in “Recent Files” table
  • Made smaller nodes in “Matrix Halo Mode”
  • World module now defaults to minimum zoom
  • Changed default font to Arial
  • Several other GUI improvements
  • Some minor bug fixes

Version 2021.7.3 (2022-01-12)

  • Improved handling of malformed packets

Version 2021.7.2 (2021-12-22)

  • External tools can be launched directly on IP devices
  • Faster file loading
  • Fixed several bugs
  • Some GUI improvements

Version 2021.7.1 (2021-12-08)

  • Fixed several issues in Top10 module
  • Fixed several issues in Endpoint Summary
  • Fixed several issues in TCP/UDP Summary

Version 2021.7.0 (2021-11-24)

  • Added TCP/UDP summary table
  • Added Resolved Names table
  • Added several columns to Endpoint summary table
  • Fixed an indexing issue with same time packets
  • Fixed a mixed TCP/UDP stats issue for same port numbers
  • Fixed some other minor issues
  • Some GUI improvements

Version 2021.6.0 (2021-10-12)

  • Added Subnet Calculator tool
  • Eliminated flickering in Timeline during packet capture
  • Improved loading and packet capture performance in the Device Matrix module
  • Improved loading and packet capture performance in the World Map module
  • Smoother packet playback experience
  • Fixed some file handling bugs
  • Some GUI improvements

Version 2021.5.0 (2021-09-14)

  • Using .NET Framework 4.6 for better 64-bit performance and security
  • Added new protocol dissectors:
    IEEE 802.3 Ethernet Raw
    IEEE 802.2 Logical Link Control (LLC)
    Spanning Tree Protocol (STP)
    Internetwork Packet eXchange (IPX)
  • Added Whois lookup tool
  • Added option to add and start external programs from within Nethor
  • Added Endpoint Summary table, with filters and the ability to export to CSV
  • Added ARP statistics per ethernet devices
  • Several GUI improvements and fixes
  • Bug-fix: Resolved names disappear when saving captured packets
  • Bug-fix: Exporting selected packet, while sort has been applied, results in wrong packet gets exported
  • Few other minor bug-fixes

Version 2021.4.0 (2021-07-26)

  • Added a new layout: Flow Graph
  • Added new protocol dissectors:
    IPv6 Hop-by-Hop Option
    IPv6 Segment Routing Header
    IPv6 ICMP Multicast Listener Discovery (MLD) Suite Version 1 & 2
  • Improved IGMP dissector
  • Several GUI improvements and fixes

Version 2021.3.0 (2021-06-02)

  • Bugfix: Statistics of sublevels of Device Conversations are displayed for wrong entry
  • Simplified Device Conversations sublevels
  • Added 10 new categories in the “Top Ten” module
  • Bugfix: Certain categories in the “Top Ten” module display unsupported sent and received sets

Version 2021.2.0 (2021-05-18)

  • Added HTTP fingerprinting
  • Added node multi-select (ctrl+click) and filtering in “Device Matrix” and “World Map”
  • Added new values for Device Statistics
  • Several GUI improvements and modifications
  • A few minor bugfixes

Version 2021.1.0 (2021-04-04)

  • Integrated diagnostic tool Traceroute with Geo locations
  • Integrated diagnostic tool Ping with Geo location
  • Integrated diagnostic tool DNS Lookup with Geo locations
  • Added new feature “Auto fit columns” to Packet Table
  • Removed “beep” when message boxes are shown
  • Improved GUI artifacts
  • Fixed several minor bugs

Version 2021.0.0 (2021-02-08)

  • Added support for WinPcap and Npcap driver live packet capture, with options for promiscuous mode and filtering. I recommend using latest Npcap driver

Version 0.96.0 (2021-01-06)

  • Added SMB database (created by Eric Kollmann) to passive OS fingerprinting
  • Extracts NetBIOS names from NBNS/NBDS packets
  • Added dissector for Link-local Multicast Name Resolution (LLMNR)
  • Added dissector for NetBIOS Name Service (NBNS)
  • Added dissector for NetBIOS Datagram Service (NBDS)
  • Added dissector for NetBIOS Session Service (NBSS)
  • Added partial dissector for Server Message Block 1/2/3 (SMB)
  • Implemented auto name resolution for all IP addresses after loading files, using system DNS server setting. This feature is by default disabled. Control this in Options Dialog

Version 0.95.0 (2020-10-02)

  • Added passive operating system fingerprinting using databases from Satori
  • Extracts host/domain names from DHCP packets
  • Added “protocols” category to “Top 10” module
  • Added layout icons to main toolbar
  • Bug-fix: Under certain conditions statistics are incorrectly calculated

Version 0.94.0 (2020-09-07)

  • MAC address ranges handling is completely rewritten and with new features. New IEEE allocations are periodically and automatically downloaded, together with an approximate issuance date for respective MAC ranges. Thanks to HD Moore for maintaining MAC Address Age Tracking Repository. Original concept by DeepMAC
  • Added new packet table columns “Source Age” and “Destination Age”, under Eth, IEEE8023 and Composite categories. These supports sort and filtering
  • Added a toolbar with common buttons
  • Furthermore, some bug fixes, GUI improvements and a notification indicator on status bar

Version 0.93.1 (2020-08-23)

  • Added a new module “I/O Graph” under Layout menu. Supports drag&drop zoom, live packet capture, filters and playback
  • Added new indicators on status bar: Packet index, filter, sort and updates
  • Added pan function (drag&drop) to “World Map” and “Device Matrix” modules
  • Added support for “not specified” Geo names in “Top 10” module
  • Bug-fix: “Top 10” module displays incorrect statistics for Datalink, Network and Transport categories
  • Bug-fix: “Timeline” module selects incorrect packets when packet list is sorted

Version 0.92.1 (2020-07-25)

  • Added a new module “Top 10” under Layout menu. Supports packet capture and filters
  • Implemented support for localized GeoData names. Currently for Japanese
  • Nethor is now shipped with an 64-bit installer and corresponding uninstall, and with support for Japanese
  • Changed GUI coloring to a “blue” theme
  • Hard reset (“Reset All” button in Options dialog) does not reset Custom Filters and Packet Coloring Rules
  • Several GUI handling and artifacts improvements, and bug-fixes

Version 0.91.1 (2020-06-30)

  • Added support for Japanese
  • Added support to check for updates
  • Improved localization all over
  • Startpage Recent Files table stays even if empty
  • Bugfix: Startpage. When removing an entry in the table during population will generate an exception