cStatus a portable network scan and monitoring tool

[hugo nabais]

Application Name	cStatus
Version	1.0.2.0
Short Description	cStatus is a software that has two main functions: to monitor and to scan a network.
Supported OSes	.net4 Windows (XP/Vista/7,8,10,server 2008, server 2012, etc)
Web Page	http://www.hnsoft.pt/cstatus
Download Link	http://www.hnsoft.pt/Downloads_cstatus
System Requirements	Any Windows with .net4 framework installed
Author	Hugo Nabais
Donations	Lots of hours have been spent making cStatus, please consider making a donation, especially if using for commercial purposes

Description
cStatus is a software that has two main functions: to monitor and to scan a network.
Comments and suggestions are welcome.

Features
- A monitoring system with:
- ICMP ping monitoring
- TCP port monitoring (TCP ping)
- Statistical informations
- Charting
- Simple alarm system
- Allows opening a host with several tools: RDP, http, FTP, etc.
- Host display filtering system

- An IP scanner:
- MAC information and MAC vender detection
- Hostname retrieval with the possiblitly to change DNS query server
- Port scanner
- Allows to add to the monitoring, one of the IPs that has been detected
- Host display filtering system

- A graphical Trace Route:
- Shows the route (hops) through the network between your computer and a specified destination computer.
- Calculates and displays the amount of time each hop took
- Hostname retrieval with the possiblitly to change DNS query server
- Allows to add to the monitoring one of the IPs that has been detected

Planned Features
Waiting for feedback.


Screenshots
Main monitoring:


Adding monitoring entry:


IP Scanner:


Trace Route:


Charting:


Usage & Installation
Run it from anywhere, portable!

Using the Application
Self explanatory.

Download Link   
http://www.hnsoft.pt/Downloads_cstatus

[hugo nabais]

Version 1.0.1.0 (September 12, 2018)
[new]   C class button added to IP Scanner form
[alt]   Disabled entries no longer have a colored row, indicating they are not running
[alt]   Column Status renamed to Last Status to better give the idea that it is the last known state
[new]   Option to limit maximum history period in memory
[new]   Option to auto save and load history for each entry
[new]   Two new sub folders, one for saving configs, and other for history auto save and load
[new]   New tool for IP calculation, subnet range, first and last IP, etc.
[new]   In the IP Scanner duplicate MACs will be highlighted in yellow
[fix]   Fixed some layout bugs
[fix]   Added some input validations
[fix]   Fixed new version form information

Screenshots:



Downloads:
·http://www.hnsoft.pt/Repository/cstatus/cstatus_1.0.1.0.zip Compressed archive.
·http://www.hnsoft.pt/Repository/cstatus/cstatus_1.0.1.0.exe Self-Extracting file.

[wraith808]

You might want to get your site checked out- it's registering as a dangerous site with Malwarebytes, and a few others.

https://www.virustot...55b4210cda/detection

[mouser]

Looks very cool.

[skwire]

Looks very cool.

-mouser (September 12, 2018, 02:06 PM)

Agreed. This looks great, @hugo nabais.  I'll give it a try soon.

[hugo nabais]

You might want to get your site checked out- it's registering as a dangerous site with Malwarebytes, and a few others.

https://www.virustot...55b4210cda/detection

-wraith808 (September 12, 2018, 12:19 PM)

My site is very simple and clean, also my software is clean, I can assure that.

Can't do much about it. No idea why they say it has malware... maybe because I don't have a SSL certificate...

[wraith808]

You might want to get your site checked out- it's registering as a dangerous site with Malwarebytes, and a few others.

https://www.virustot...55b4210cda/detection

-wraith808 (September 12, 2018, 12:19 PM)

My site is very simple and clean, also my software is clean, I can assure that.

Can't do much about it. No idea why they say it has malware... maybe because I don't have a SSL certificate...

-hugo nabais (September 13, 2018, 11:49 AM)

Ok, I was just letting you know in case you wanted to reach out.  It could be that whomever had the domain before you did had some nasty stuff hosted.  Or it could be a false positive.  But I figured that you'd want to know.

[Ath]

maybe because I don't have a SSL certificate...

-hugo nabais (September 13, 2018, 11:49 AM)

If you have access to the server you can quite easily configure it to have a Let's Encrypt free certificate...

[hugo nabais]

maybe because I don't have a SSL certificate...

-hugo nabais (September 13, 2018, 11:49 AM)

If you have access to the server you can quite easily configure it to have a Let's Encrypt free certificate...

-Ath (September 13, 2018, 01:54 PM)

Done...

I don't know if this was the cause of the false detection, but at least the site is "secured"

[AzureToad]

I just tried opening http://www.hnsoft.pt/cstatus, but was blocked by Barracuda Networks:

The link you are accessing has been blocked by the (company name) Web Filter because it contains spyware. The name of the spyware is: Spyware.Exploit.Misc.MU

FYI.

[wraith808]

Also, changing it to https, I now get ERR_SSL_PROTOCOL_ERROR.  Not sure if that's Malwarebytes mucking about, or the method that you used to generate your cert.

[Ath]

~10 minutes later.

It auto-redirected to https and worked just fine from here (using Firefox and on my home connection)

[Shades]

In the default configuration there is a link that checks Google DNS server 8.8.8.8 at port 53. 'tracert 8.8.8.8' shows me that there are 11 hops between my system and the Google DNS server.
So I can connect to the DNS server.

When I configure that DNS server as the only one in my static IP address configuration (and 'ipconfig /flushdns'), I can surf without issues.
So port 53 isn't blocked on their or my end.

However, both cStatus 1.0.0.0 and 1.0.1.0 fail to connect to this Google DNS server.

Adjusting my IP configuration from static to dynamic (and 'ipconfig /flushdns' again), same results.
Disabling the Windows firewall, just in case, same results.
Configuring a different DNS server entry in cStatus: 208.67.222.222 (OpenDNS) TCP ping port 53, everything works perfectly.

Why is the Google DNS server so problematic?

Even if there is no clear answer to that question, you might want to change the default DNS server entry from Google to OpenDNS.
That would leave a better first impression of your software, which is very nice.

[hugo nabais]

About my site,

I'm starting to get tired of this, but I'll try to summarize:
Bitdefender, Malwarebytes and SpamHaus have decided to "blacklist" because they say it has some generic "malware".
But +/- 60 other companies detect no malware or problems on my site/software.
I contacted the 3 companies asking them what spyware they are talking about, I have received zero replies.
I can't do much more but only say that my software and site are clean, use it only if you want.

On Spanhaus I could find the following information:
The malicious files can be found here: hXXp://www.hnsoft.pt/Repository/clicador/clicador_2.1.0.4.exe
Maybe they think Clicador is a malware because it intercepts low level mouse and keyboard functions, and tries to fool programs into thinking they are being clicked. (which is the objective of the program)


About 8.8.8.8 port 53 I use it as a method to detect Internet access on several sites and never had a problem, I can't explain why you cannot do it!

 

[wraith808]

I can't do much more but only say that my software and site are clean, use it only if you want.

-hugo nabais (September 17, 2018, 08:04 AM)

I've used your software so know that it is clean (and Clicador doesn't show up in my local Malwarebytes).  But, others visiting won't know, and will disregard it out of fear, so figured it might be good to inform you.  The details were some sort of riskware was detected: "Riskware, or “risky software,” describes legitimate software programs that contain loopholes or vulnerabilities that can be exploited by hackers for malicious purposes."  With that in mind, your reasons make sense.

[Shades]

About 8.8.8.8 port 53 I use it as a method to detect Internet access on several sites and never had a problem, I can't explain why you cannot do it!

-hugo nabais (September 17, 2018, 08:04 AM)

Want to know something really "funny"?

8.8.8.8  is the secondary DNS server from Google. So I thought "let's try their primary DNS server", so configured: 8.8.4.4 port 53 which works like a charm. Retried their secondary DNS server again (for funsies) and you guessed it right. All (test) packages to that server are dropped.

Can't explain it either...but in any case, thank you for a tool that will come in handy when troubleshooting networking issues.

[hugo nabais]

About 8.8.8.8 port 53 I use it as a method to detect Internet access on several sites and never had a problem, I can't explain why you cannot do it!

-hugo nabais (September 17, 2018, 08:04 AM)

Want to know something really "funny"?

8.8.8.8  is the secondary DNS server from Google. So I thought "let's try their primary DNS server", so configured: 8.8.4.4 port 53 which works like a charm. Retried their secondary DNS server again (for funsies) and you guessed it right. All (test) packages to that server are dropped.

Can't explain it either...but in any case, thank you for a tool that will come in handy when troubleshooting networking issues.

-Shades (September 17, 2018, 07:17 PM)

Can you "telnet 8.8.8.8 53" from your computer?

[Shades]

I don't have telnet installed. And because of security risks with that protocol I'm not intending to do that either.

My workaround is fine with me. It was just weird enough of an error to mention it to you, so you could keep track of it in your internal bug tracker 

[hugo nabais]

I don't have telnet installed. And because of security risks with that protocol I'm not intending to do that either.

My workaround is fine with me. It was just weird enough of an error to mention it to you, so you could keep track of it in your internal bug tracker 

-Shades (September 18, 2018, 06:26 AM)

If I'm to put this in my bug tracker I need your help tracking it, because I can't reproduce that bug, and noone else has reported it to me.
Security risk would be if you were using a "telnet server".
You can install the telnet client in your computer to test this, then if you want uninstall it.
Telnet client is a tool, you can use it to test many things not just telnet protocol.

The "telnet 8.8.8.8 53" will not start a "telnet protocol" session it will just try to connect to port 53 of the DNS server, and give me the information if it can connect or not.

[Shades]

For the time being I have enabled the telnet client that comes with Windows 10.  Using 'telnet 8.8.8.8 53' results in a blanked CLI box. The same happens when I use 'telnet 8.8.4.4 53', so I assume that behavior would be what one expects.

cStatus a portable network scan and monitoring tool
I did not have any issues browsing when a static IP address and only the 8.8.8.8 DNS server were configured (including the 'ipconfig /flushdns'), so I didn't expect any connection issue.

cStatus a portable network scan and monitoring tool
Screenshot of cStatus 1.0.1.0 (with initial config file) that shows all packages to 8.8.8.8:53 are dropped.

cStatus a portable network scan and monitoring tool
Screenshot of cStatus 1.0.1.0 that shows that packages to 8.8.4.4:53 do arrive.

cStatus a portable network scan and monitoring tool
After restarting cStatus, the problem remains.

cStatus a portable network scan and monitoring tool
Progress!!!  After another restart of cStatus and recreating the 8.8.8.8:53 entry, packages are not dropped anymore.

Spoiler

cStatus a portable network scan and monitoring tool
Overview systeminfo, in case that helps.

** Edit:  added last screenshot + spoiler.

[hugo nabais]

Thank for your troubleshooting I have now understood what was happening with you!

In the default configuration that was shipped with the software the timeout period of the 8.8.8.8 entry was set to only 10 miliseconds!!
Because cStatus did not receiving a reply in less that 10 ms it was failing.

When you add a new entry the default timeout is 2000 ms (2 seconds) so no more problems.

My bad, will fix for future versions, will add other default entries that work:)

[KodeZwerg]

Hello H. Nabais, you have done a really nice application there!
Usage is very easy and simple.
No installation required besides .Net Framework if missing.
After fixing first Entry to 2000ms as described above, all works in harmony.
On my system AntiVirus tells nothing bad, all works like it should, thank you.

One thing you might could add would be a "Save as default" Button in your "Entry" Dialog. Or maby some Profile option for defaults, would be better.


Regards,

KodeZwerg

[hugo nabais]

Thanks KodeZwerg,

I'm working on several fronts in cStatus, one of them has to do with an option to be able to set different values ​​for default entries.
The ability to have several profiles and being able to change on the fly a profile for one or more entries is very interesting. Will  add this idea to my TO DO list.
Thanks again.

[hugo nabais]

Well malwarebytes replied the site was clean and they were going to remove the blockage, but they didn't...

[wraith808]

That url is not the one that is in your original post, i.e. http://www.hnsoft.pt/

EDIT: There was an image up there when I replied, but I don't see it...