{tcpdump || snort - as a agents} + ethereal.
Much better than $xx000 commercial sniffer(s) /I used both, and oput
commercial system into the wastebucket after comparation/.
Exception - if you need H.323, use commercial sniffers.
----- Original Message -----
From: "Yann Berthier" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, January 12, 2004 3:51 PM
Subject: Re: Good network sniffer?
>
> On Mon, 12 Jan 2004, Kevin C Miller wrote:
>
> >
> > Tcprelay may get the replay portion of your question,
> > <http://tcpreplay.sourceforge.net/>
>
> You can add netdude <http://netdude.sourceforge.net/>, along with
> ethereal and tcpreplay, and you will have a powerful solution to
> sniff and decode packets, and to edit and replay them at will.
>
> - yann
