通过

Ethereal Network Packet Protocol Analyzer

  • 项目

I just rediscovered the Ethereal network protocol analyzer.  I was trying to track down a problem using the tcptrace proxy which is a nice simple little tool when it works.  I'm not quite sure what the problem was, but I was seeing different behavior when I was using the proxy than when I wasn't, so I went for the full blown driver level sniffing that Ethereal provides.  It's based on the work of the WinPCap organization.  I'll let you know why I was sniffing network packets in my next post.

Comments

  • Anonymous
    May 07, 2006
    Not the greatest UI, but how else would you fit all the info in? I love it :)
  • Anonymous
    May 08, 2006
    The only problem I have with ethereal is the winpcap driver doesn't work so well on dual processor systems.  Or atleast it didn't used to.  The version I had would explicitly unload itself.  Or die trying.  Hope you like the color blue!