Annotated edit history of
PacketSniffer version 4, including all changes.
View license author blame.
| Rev |
Author |
# |
Line |
| 1 |
JohnMcPherson |
1 |
A Packet Sniffer is a program that can record and filter network traffic on a machine or network switch. |
| |
|
2 |
|
| |
|
3 |
Most of these programs (on [Linux] at least) use the |
| |
|
4 |
pcap (__P__acket __Cap__ture) library. |
| |
|
5 |
|
| |
|
6 |
|
| |
|
7 |
[Snort] includes packet sniffing capabilities. |
| 2 |
JohnMcPherson |
8 |
|
| |
|
9 |
tcpdump(8) is a command line sniffer. |
| 1 |
JohnMcPherson |
10 |
|
| 4 |
LawrenceDoliveiro |
11 |
A pretty-yet-powerful packet sniffer is [Wireshark] (née [Ethereal]), which uses a point-and-click [GUI]. |
| 1 |
JohnMcPherson |
12 |
|
| 3 |
GreigMcGill |
13 |
Handy Hint: If you are on a "small footprint" machine, where you have access to tcpdump, but not ethereal, you can use tcpdump with -w filename, and then load filename into ethereal on another machine for a more detailed analysis. |
| 1 |
JohnMcPherson |
14 |
|
| |
|
15 |
---- |
| 2 |
JohnMcPherson |
16 |
Part of CategoryNetworking. See also packet(7). |
