TCPDUMP for Windows is a clone of TCPDUMP for UNIX systems, ported by Microolap team to Windows with Microolap Packet Sniffer SDK. The advantages of TCPDUMP for Windows are portability, compatibility, small footptint.
Version: 22.214.171.12472Microolap TCPDUMP for Windows accurately reproduces all features of the original tcpdump by LBNL's Network Research Group, developed for the UNIX systems.
License: Commercial $59.95
Operating System: Windows
Since Microolap TCPDUMP for Windows is compiled with the Packet Sniffer SDK, it has the following advantages: It is portable: Microolap TCPDUMP for Windows does not require installation and could be ran from any removable device: it is compiled with Packet Sniffer SDK, so no pre-installed third-party packet capture drivers are required. Just run tcpdump.exe, and use original tcpdump command-line interface you're already familiar with.
Compatibility: Microolap TCPDUMP for Windows is fully UEFI and Secure Boot compatible.
Here is a list of the Windows family operating systems supported by Microolap TCPDUMP for Windows: Windows XP, WinXP x64, Windows Vista, Vista x64, Windows 2003, Win2003 x64, Windows 2008, Windows 2012, Windows 8, Windows 10, Windows Server 2016, Windows server 2019, and various Windows PE versions. Please let us know if any of the Windows updates shortens this list.
Small footprint: Microolap TCPDUMP for Windows comes as a single 600Kb .EXE file, that could be uploaded to a remote Windows PC box network traffic of which you need to analyze, and then run it using any remote administration tool.
Version 126.96.36.19972: Signed with all imaginable EV certificates and validated by Microsoft for UEFI and Secure Boot compatibility. Windows PE x86/64 compatible version also is available in commercial version.
Version 4.9.2: Twitter: @tcpdump4windows. Windows OS supported: Windows XP, WinXP x64, Windows Vista, Vista x64, Windows 2003, Windows 2008, Windows 2012, Win2003 x64, Windows 8, Windows 10, Windows Server 2016.
Version 3.9.8 build 4.1: Version synchronized with original tcpdump 3.9.8 and built with Packet Sniffer SDK 4.1. Loopback adapter performance significantly improved.
Version 3.9.8: Version synchronized with original tcpdump 3.9.8 and built with Packet Sniffer SDK 4.0. New feature: support of loopback adapter.
Version 3.9.7: Version synchronized with original tcpdump 3.9.7. Please refer to http://tcpdump.org for details.
Version 3.9: Versions numbers are synchronized with original tcpdump. Please refer to http://tcpdump.org for details.
Version 1.0: First public release