Wireshark / Ethereal

Wireshark

Wireshark can be used for tracking packets across a network. It's almost required for tracing weird stuff. == Warning == Ok, first things first: http://archives.neohapsis.com/archives/openbsd/2004-11/2180.html The important thing to read:
 FB: ethereal was removed from the ports tree because "the ethereal team does
 not care about security, as new protocols get added, and nothing gets done
 about the many more holes that exist." I hope that this is not the beginning
 of a hunting season to remove software because it's [insecure. That] will end
 with a system that's secure because [it] can't do anything. I'm wrong, right?
 
 Peter Valchev: You are in part correct. 
There is more to it than that, but basically Ethereal is something that can potentially make your machine vulnerable. I suggest installing this on a Windows machine or something that you don't mind getting beaten into a pulp. While it is unlikely (is it really safe to say that?) it will happen, it _is_ something to be concerned about. Personally, I decided not to put it on a server, so it goes on my Windows XP Pro laptop. == What's in a name? == Due to copyright / trademark reasons, the writers of Ethereal decided to change the name of the software to Wireshark. Very little mention of this is made on the original Ethereal website. From the wireshark.org website:
 Same developers, same code, different name. The Ethereal network protocol analyzer has changed its name to Wireshark.
== Getting Wireshark == You can get Wireshark from: http://www.wireshark.org/download.html == Examples == Some examples to come here soon!
Syndicate content