topic Re: tool to read tcpdump.out in Operating System - Linux

tool to read tcpdump.out

skt_skt — Fri, 22 Aug 2008 14:39:15 GMT

2.6.9-67.0.1.ELsmp
Red Hat Enterprise Linux AS release 4 (Nahant Update 5)

# file tcpdump.out
tcpdump.out: tcpdump capture file (little-endian) - version 2.4 (Linux "cooked", capture length 96)

i want to know of the best tool which can be used to analyse the dump either from the host itself? Or any tool which can be insatalled on windows(XP) and read the linux dump.

Re: tool to read tcpdump.out

Court Campbell — Fri, 22 Aug 2008 14:47:43 GMT

ethereal

Re: tool to read tcpdump.out

Heironimus — Fri, 22 Aug 2008 14:49:12 GMT

I usually use wireshark to read tcpdump/pcap files.

Re: tool to read tcpdump.out

Court Campbell — Fri, 22 Aug 2008 14:59:29 GMT

before you get confused wireshark is ethereal. I just still call it ethereal.

Re: tool to read tcpdump.out

skt_skt — Fri, 22 Aug 2008 17:25:50 GMT

i ahve the ethreal NPA on pc. Any one know of any better one

Re: tool to read tcpdump.out

Court Campbell — Fri, 22 Aug 2008 19:04:19 GMT

Sorry, just curios. What is NPA? I am not familair with that acronym in relation to ethereal. I am sure I will feel stupid after you tell me.

Re: tool to read tcpdump.out

skt_skt — Mon, 25 Aug 2008 16:50:48 GMT

really??

Network protocol analyzer

Re: tool to read tcpdump.out

Court Campbell — Mon, 25 Aug 2008 18:50:34 GMT

Yep. I thought is was Network Professional Association. There are too many acronyms in our line of work. Plus the fact that the same acronym can have quite a few meanings.