Good network sniffer?

Tue Jan 13 05:17:31 UTC 2004

{tcpdump || snort - as a agents} + ethereal.

Much better than $xx000 commercial sniffer(s) /I used both, and oput
commercial system into the wastebucket after comparation/.

Exception - if you need H.323, use commercial sniffers.

----- Original Message ----- 
From: "Yann Berthier" <yb at sainte-barbe.org>
To: <nanog at merit.edu>
Sent: Monday, January 12, 2004 3:51 PM
Subject: Re: Good network sniffer?

>
> On Mon, 12 Jan 2004, Kevin C Miller wrote:
>
> >
> > Tcprelay may get the replay portion of your question,
> > <http://tcpreplay.sourceforge.net/>
>
>    You can add netdude <http://netdude.sourceforge.net/>, along with
>    ethereal and tcpreplay, and you will have a powerful solution to
>    sniff and decode packets, and to edit and replay them at will.
>
>       - yann