topic Re: Need Ethernet Packet Analyzer (freeware/shareware) in Networking

Need Ethernet Packet Analyzer (freeware/shareware)

Jay Bollyn — Thu, 21 Oct 2004 15:39:52 GMT

I have a couple winXP machines that are *very* locked down. They are release stations in a pay-for-print system we are rolling out.

I don't want to install a packet analyzer on the release station itself, since it would be really awkward because of the security measures.

Is there a freeware/shareware packet analyzer I could install on my office PC, and watch the release station traffic? All the machines involved are on the same subnet (10.133.12.*).

Of course, points assigned.

:-) Jay

Re: Need Ethernet Packet Analyzer (freeware/shareware)

Ron Kinner — Thu, 21 Oct 2004 21:12:10 GMT

http://www.snort.org/ is a good start. It's actually an intrusion detection system but in order to get it to work they have you install a packet analyzer.

Ron

Re: Need Ethernet Packet Analyzer (freeware/shareware)

Paul Nunez — Fri, 22 Oct 2004 06:13:22 GMT

Hi Jay,

I highly recommend Ethereal:

www.ethereal.com

You'll also need to download and install the WinPcap software in order to get traces from the Windows PC...

HTH,

Paul

Re: Need Ethernet Packet Analyzer (freeware/shareware)

Jay Bollyn — Fri, 22 Oct 2004 08:59:10 GMT

I have used Ethereal before. I had forgotten that on a switched network (which we have), only broadcast and multicast traffic will be sent to all ports. So it looks like I will need to install Ethereal on the release station.

http://www.ethereal.com/faq.html#q5.1

We do have manageable switches, but I don't have access to them (that is another dept).

Thanks both!

:-) Jay