Two network analyzers at the same time
Results 1 to 6 of 6

Thread: Two network analyzers at the same time

  1. #1
    Member
    Join Date
    Nov 2003
    Posts
    64

    Two network analyzers at the same time

    I was wondering if anyone tried to use two analyzers or monitors on the same machine.
    For example using different filters on each one to monitor certian traffic
    Thanks for the help

  2. #2
    King Tutorial-ankhamun
    Join Date
    Jul 2004
    Posts
    897
    I've used Ettercap and Ngrep at the same time on my Linux boxes. It seems to work fine, but I would imagine it there is too much traffic they may miss more packets.

  3. #3
    AO übergeek phishphreek's Avatar
    Join Date
    Jan 2002
    Posts
    4,324
    I've used TCPDump and Ethereal at the same time on one interface and then used ettercap on a second interface. AFAIK, it didn't miss any packets...
    Quitmzilla is a firefox extension that gives you stats on how long you have quit smoking, how much money you\'ve saved, how much you haven\'t smoked and recent milestones. Very helpful for people who quit smoking and used to smoke at their computers... Helps out with the urges.

  4. #4
    Member
    Join Date
    Nov 2003
    Posts
    64
    Thanks for the quick replies, but i did mean on the same interface. And i was thinking about it , I would probably would need to create tight filters so they do not overlap and miss packets.

  5. #5
    AO übergeek phishphreek's Avatar
    Join Date
    Jan 2002
    Posts
    4,324
    Why don't you just use ethereal and capture everything, then go back and create your filters?

    Then you can be sure that you don't miss anything.
    Quitmzilla is a firefox extension that gives you stats on how long you have quit smoking, how much money you\'ve saved, how much you haven\'t smoked and recent milestones. Very helpful for people who quit smoking and used to smoke at their computers... Helps out with the urges.

  6. #6
    Senior Member
    Join Date
    Jan 2002
    Posts
    1,207
    You can have as many capture applications running as you like - they'll all see all the traffic, provided they don't exhaust some other resource (like CPU time or memory)

    Slarty

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides