Archive for the 'Protocol Analysis' Category

Budget network taps


February 20th, 2008

Sometimes you fall over a product and it blows you away. Network taps have until now been exotic hardware affordable only by large IT departments with the budget to match.
Not any more! nmon have brought out a range of low cost network taps and network traffic analysers with NetFlow support. Looks like network taps just [...]

Popularity: 42% [?]

Why do I need a network tap?


October 1st, 2007

One of the big problems in a switched network is to access reliably network traffic for analysis or monitoring purposes. Many solutions require changes either to the hosts being monitored or require modifications to your network infrastructure.
Many managed switches have the ability to mirror the traffic on one or more ports. Mirroring simply involves the [...]

Popularity: 35% [?]

Rumint now works with WinPcap 4.0.1


September 19th, 2007

Greg Conti has released a new version of rumint that now works with WinPcap 4.0.1. If you tried rumint before and had problems, I suggest you give it another go.
Popularity: 24% [?]

Popularity: 24% [?]

Wireshark training opportunities


September 18th, 2007

Protocol analysers are difficult tools to master. Though, once mastered you’ll see the pay-off in increased productivity for the rest of your career. Many technologies come and go, but the fundamentals of how networks work changes slowly.
You can slug it out with books but structured learning will help speed things along.
If self paced learning suits [...]

Popularity: 21% [?]

WinPCap packet sniffer for commercial development


September 5th, 2007

WinPCap is a great Windows based, open source driver for packet sniffing wire-based networks using a bog standard network interface card. WinPCap is licensed under the General Public License (GPL).
From a commercial software developers perspective, the GPL can be quite intimidating. Consequently, a lot of commercial developers won’t touch GPL’ed code with a very long [...]

Popularity: 22% [?]

Affordable wireless packet capture solution


September 4th, 2007

Tools like the Test-Um Wi-Net are great for trouble shooting wireless networks. But, Wi-Net falls a long way short of giving you real technical insight into your wireless network. What do you do if you need more? Say, you need to capture packets and the like.
One solution is to use the WireShark + AirPcap combination.
WireShark [...]

Popularity: 33% [?]

Packet visualization with Rumint


August 23rd, 2007

One of the tools recommended in Chris Sander’s Practical Packet Analysis book is called Rumint.
Rumint is a free, open source packet visualization tool available for Microsoft Windows (written in Visual Basic.)
Roomint’s author, Greg Conti, has a book to be published by No Starch Press called Security Data Visualization.
One problem I’ve run into with Rumint [...]

Popularity: 21% [?]

Chris Sanders interview


August 7th, 2007

FYI there is an interesting interview with Chris Sanders, author of “Practical Packet Analysis: Using Wireshark to solve real-world network problems”.
If you are new to packet analysis, you can do a lot worse than read the book.
Popularity: 16% [?]

Popularity: 16% [?]

Practical Packet Analysis Book


June 22nd, 2007

Just found an interesting book…if you’re a blood ‘n guts comms bod then I think this book should find a place in your bookshelf. The book can be found here on the publisher’s website.
The author, Chris Sanders, also has a good blog too. Well worth adding to your feed reader.
Popularity: 17% [?]

Popularity: 17% [?]