|
Posted by Winged on January 18, 2006, 8:17 pm
If you were Registered and logged in, you could reply and use other advanced thread options
>
>>I also suggest Ethereal from http://www.ethereal.com/
>>
>>tcpdump from http://www.tcpdump.org/ will alow to capture
>>data in a file for further analysis
>
>
> These are really the last word in free packet sniffing. Ethereal is
> the stuff.
>
While I use ethereal, it is a valid product, there are several exploits
against ethereal and several viruses which can elude ethereal detection
IF it is loaded on an infected machine. I recommend using it on a
separate device from the machine being monitored even though it can work
fairly well monitoring on the local machine. When running in the
local machine to monitor local machine activity, streaming media can be
problematic with low end (slow) devices.
But ethereal is almost as good as having a dedicated sniffer device. We
have used the box with taps in closets for several years, it has been
fairly reliable giving us what we need.
I prefer the nix versions but it is a good and stable product in nix and
winx environs. Concur with tcpdump suggested above as essential to the
configuration.
Winged
| 
XML site map