[Dshield] Network Sniffer

Roman Fomichev from at e-solutions.lv
Tue Sep 9 20:43:17 GMT 2003


ethereal, as many others sniffing tools can enable promissious mode on NIC 
to capture all the traffic in your LAN.
Only if you are using switched network, you need to enable port mirroring 
on  your port to see ALL traffic, not only coming to and from you

Roman

On Tue, 9 Sep 2003 09:07:51 -0700, Kane Wong <kwong at cwalkergroup.com> 
wrote:

> If using Ethereal, how can I capture the packets from other workstation,
> because I found that once I start the packet capturing, it only captures 
> the
> packets from and to my workstation only.  If your guys know it, please 
> let me
> know.
>
> Thanks!
>
> -----Original Message-----
> From: Roman Fomichev [mailto:from at e-solutions.lv]
> Sent: Tuesday, September 09, 2003 4:44 AM
> To: General DShield Discussion List
> Subject: Re: [Dshield] Network Sniffer
>
>
> www.ethereal.com very good tool for windows
> tcpdump - very good tool for linux
> netmon - tool from microsoft - a very good one! I have the full version.
> If I remember corectly it goes with MS SMS.
>
> Roman.
>
>
> On Tue, 9 Sep 2003 08:42:11 +0200, Graham Dodd <g.dodd at falk-ross.de> 
> wrote:
>
>> Good Morning All,
>>
>> I am trying to find out if a bad NIC is causing problems with our SQL
>> Server, this would be no problem with a Networks General Sniffer, but I
>> don't have one anymore :-(
>>
>> Does anyone know of a suitable software package that will provide
>> statistics
>> on the network traffic, specifically giants and runts.
>>
>> thank you,
>>
>> Graham
>>
>> ~~~~~~~~~~~~~~~~~~~~~
>> Graham K. Dodd
>> Director of Operation
>> Falk & Ross GmbH
>> Tel. +49(6301)717-0
>> Fax. +49(6301)717-270
>>
>> _______________________________________________
>> list mailing list
>> list at dshield.org
>> To change your subscription options (or unsubscribe), see:
>> http://www.dshield.org/mailman/listinfo/list
>>
>
>
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see:
> http://www.dshield.org/mailman/listinfo/list
>
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see: 
> http://www.dshield.org/mailman/listinfo/list
>





More information about the list mailing list