Good network sniffer?

Mailman List Mirror (Read Only)
1

Hi Nanog,

Can anyone recommend a good network monitor that can replay captured
packets? Windows or *nix. Free is great, commercial is ok too.

TIA,

Ben

2

tcpdump + Ethereal for *nix, best tool in de biz if you ask me...and
free too.

Cheers,

Erik

3

Can anyone recommend a good network monitor that can replay captured
packets? Windows or *nix. Free is great, commercial is ok too.

Ethereal. Free. http://www.ethereal.com

You gotta love their catchy little descriptive sub-heading: "Sniffing the
glue that holds the Internet together." :slight_smile:

4

tcpdump and ethereal can replay captured packets?

5

Tcprelay may get the replay portion of your question,
<http://tcpreplay.sourceforge.net/>

-Kevin

6

You can add netdude <http://netdude.sourceforge.net/>, along with
   ethereal and tcpreplay, and you will have a powerful solution to
   sniff and decode packets, and to edit and replay them at will.

      - yann

7

{tcpdump || snort - as a agents} + ethereal.

Much better than $xx000 commercial sniffer(s) /I used both, and oput
commercial system into the wastebucket after comparation/.

Exception - if you need H.323, use commercial sniffers.