Sniffer!!

After remote admin lets find out a good sniffer for windoze.:D

so what do u ppl say?
what would u call a nice cheap(ofcourse) GUI sniffer!!
i have tried various ones but since they're demo versions,all the features aren't enabled.
:) :)

www.Ethereal.com . Free and works for me if packet driver installed.

www.Snort.org . Never tried it.

snort is more of an IDS (for linux) than sniffer.
no html or other content shown.
and ethereal!
yeah used it once(win version) but isn't it just meant for the lan connections.
as far as i remember it didn't showed any external connections.

i just downloaded ISS iris.
looks like a good one.but lol its demo ver again.:p

DSNIFF would be the best i think, but again no win platform.
Only other is WINDUMP which covers all windows and is freeware.

well we can say:


dsniff
tcpdump
ngrep
ethereal
ettercap

When i was looking into my network problems i used iris and yeah it does have a gui interface. Worked well for me... :cool:

Network associates has a hardware packet sniffer thats really nice if you have the $$$ to spend

NATAS is a great free sniffer (No GUI, but the logs are thorough) if you want to see the raw packets.

I disagree with the SNORT reference. Sure Snort is an IDS by design, but it's an excellent sniffer. And with the new signatures out right now, they do support HTML traffic. Also, if you want to get crazy you can right your own sigs to sniff whatever you want....................