Spyware Warrior

[mikey]

Anyone know of a freeware sniffer with 802.1.1 features and capable of simultaneous capture across multiple adapters? I have Capsa and other commercial wares for my own use. However, I've been helping a friend layout his SOHO and home LAN. His budget doesn't provide for high $ wares.

TIA
_________________
-
W2K/2K3/XP/2K8/Vista/W7/RHE/DEBIAN/SUSE

Spyware/Adware is NOT freeware, it costs all of us dearly.

Mikey's Stuff

Fiddler and friends...essential web diagnostic, forensic, & development tools.
-

[Gary R]

Wireshark is about the best free protocol analyser I know of .... http://www.wireshark.org/

Whether it can do all that your friend requires I couldn't say offhand. It's a long time since I've had any real cause to use it, and I know its been updated a lot since I last did.
_________________
Gary R Administrator at Malware Removal University



If you've been helped, please donate to help with the costs of this volunteer site .... Spyware Warrior Donations

[mikey]

Well, Wireshark/Ethreal has always been the choice tool to ensure that the entire stack is monitored. BTW I have many other tools that also use the WinPCap stack. However, it doesn't allow for multiple adapters/networks in simultaneous use within a single node.

I too have not used Wireshark in a long time. When I think of an analyzer today, I think of more and friendly network diagnostics. An example would be the tool I mentioned earlier...Capsa; http://www.colasoft.com/capsa/features.php And, of course for forensics, we now have so many more 'specialized' tools to monitor services and investigate incidents with.

Oh well, I'll figure out something. I've been known to get pretty creative when networking.

EDIT: Oh, almost forgot; thx for the suggestion.
_________________
-
W2K/2K3/XP/2K8/Vista/W7/RHE/DEBIAN/SUSE

Spyware/Adware is NOT freeware, it costs all of us dearly.

Mikey's Stuff

Fiddler and friends...essential web diagnostic, forensic, & development tools.
-

[Gary R]

Yes, I had a feeling it didn't do multiple simultaneous captures, but I didn't know whether it had been updated to include that capability or not.

Off hand I can't think of anything that's free that does, but if I come across anything I'll be sure to let you know about it.

Capsa looks interesting, but I can see why your friend might blanche a bit at the price if they didn't have a distinct and professional need for it.
_________________
Gary R Administrator at Malware Removal University



If you've been helped, please donate to help with the costs of this volunteer site .... Spyware Warrior Donations