Hi, I prefer ethereal. I have used the the sniffers as well but personally I prefer the unix versions(maybe because im more comfortably with unix as you can have full control) e.g even tcpdump i find very good because you can use this with the ngrep utility to filter stuff.
As suggested its quite important to know how protocols work and conversate. regards, seun Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=72466&t=72346 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]