Topic: protocol analyzer ?

[mikey]

Anyone know of a freeware sniffer with 802.1.1 features and capable of simultaneous capture across multiple adapters? I have Capsa and other commercial wares for my own use. However, I've been helping a friend layout his SOHO and home LAN. His budget doesn't provide for high $ wares.

TIA

[Samker]

Anyone know of a freeware sniffer with 802.1.1 features and capable of simultaneous capture across multiple adapters? I have Capsa and other commercial wares for my own use. However, I've been helping a friend layout his SOHO and home LAN. His budget doesn't provide for high $ wares.

TIA

I don't have to much experience with this so I'll suggest to check "Wireshark" features: http://www.wireshark.org/about.html

Another alternative is "Ethereal": http://www.ethereal.com/


I hope this info will help you??

[mikey]

Hey guy, thx for the suggestion.

Well, Wireshark/Ethreal has always been the choice tool to ensure that the entire stack is monitored. BTW I have many other tools that also use the WinPCap stack. However, it doesn't allow for multiple adapters/networks in simultaneous use within a single node.

I have not used Wireshark in a long time. When I think of an analyzer today, I think of more and friendly network diagnostics. An example would be the tool I mentioned earlier...Capsa; http://www.colasoft.com/capsa/features.php And, of course for forensics, we now have so many more 'specialized' tools to monitor services and investigate incidents with.

I don't think any of the freewares fit the bill here. Oh well, I'll figure out something. I've been known to get pretty creative when networking.

[Samker]

IMO, Capsa is best option but it also have "high" price:

Capsa Enterprise - USD 999.00

Capsa Professional - USD 699.00

Capsa WiFi - USD 699.00

...

I've been known to get pretty creative when networking.

...

Good luck! 



P.S.

Now, I have this picture in my mind:




Little joke...

[vishwanath99]

better to use backtrack 5 (ubuntu).. U wl get    
protocol analyzer and penetration test softs

[Pez]

Perhaps some of Sysinternels tools can be use full. Thay are all freeware.

"Sysinternals Networking Utilities" http://technet.microsoft.com/en-us/sysinternals/bb795532

"Sysinternals Utilities Index" http://technet.microsoft.com/en-us/sysinternals/bb545027