

	Kefk Network : Open Source & Free Software \| About \| Wiki.	Suchen \| Index \| Inhalt \| Site Map \| What's New?

	Akteure \| Geschichte \| Freie Software \| Open Source Software \| Projekte \| Ressourcen \| Sammlungen.

Ethereal

www.ethereal.com

"Sniffing the glue that holds the Internet together"

OS & OC : Open Source : Ethereal : Übersicht
28-Jul-2001/03-Feb-06

Übersicht

Leistungsfähiger Open Source Netzwerk-Protokollanalysator.

Features

At the present time, Ethereal has enough functionality to be useful, but it's far from complete. It's still beta software, and new features and bug fixes are being added all the time. Here is the list of features, current as of version 0.8.2, in no particular order:

Data can be captured "off the wire" from a live network connection, or read from a capture file.

Ethereal can read capture files from tcpdump (libpcap), NAI's Sniffer™ (compressed and uncompressed), Sniffer™
Pro, NetXray™, snoop, Shomiti Surveyor, AIX's iptrace, Microsoft's Network Monitor, Novell's LANalyzer, RADCOM's
WAN/LAN Analyzer, HP-UX nettl, ISDN4BSD, Cisco Secure IDS iplog, the pppd log (pppdump-format), and the AG
Group's/Wildpacket's Etherpeek. It can also read traces made from Lucent/Ascend WAN routers and Toshiba ISDN routers.
Any of these files can be compressed with gzip and Ethereal will decompress them on the fly.

Live data can be read from ethernet, FDDI, PPP, token-ring, X.25, or Classical IP over ATM interfaces.

Captured network data can be browsed via a GUI, or via the TTY-mode "tethereal" program.

Capture files can be programmatically edited or converted via command-line switches to the "editcap" program.

The following interfaces and packet types are currently supported: AARP, AFS, AH, AIM, ARP, ASCEND, ATM, AUTO_RP, BACAPP, BACNET, BGP, BOOTP, BOOTPARAMS, BROWSER, BVLC, BXXP, CDP, CGMP, CHDLC, CLNP, CLTP, CONV, COPS, COTP, CUPS, DATA, DCERPC, DDP, DDTP, DEC_STP, DIAMETER, DNS, DSI, DVMRP, EIGRP, EPM, ESIS, ESP, ETH, FDDI, FR, FRAME, FTP, FTP-DATA, GIOP, GNUTELLA, GRE, GTP, GVRP, H1, H261, HCLNFSD, HSRP, HTTP, ICMP, ICMPV6, ICP, ICQ, IGMP, IGRP, ILMI, IMAP, IP, IPCOMP, IPCP, IPP, IPV6, IPX, IPXMSG, IPXRIP, IPXSAP, IRC, ISAKMP, ISCSI, ISIS, ISIS_CSNP, ISIS_HELLO, ISIS_LSP, ISIS_PSNP, ISL, ISUP, IUA, KERBEROS, KLM, L2TP, LANE, LANMAN, LAPB, LAPBETHER, LAPD, LCP, LDAP, LDP, LLC, LMI, LPD, M2PA, M3UA, MAILSLOT, MALFORMED, MAPI, MBTCP, MGMT, MIP, MOUNT, MP, MPEG1, MPLS, MRDISC, MSDP, MSNIP, MSPROXY, MTP3, NBDGM, NBIPX,
NBNS, NBP, NBSS, NCP, NETBIOS, NETLOGON, NFS, NISPLUS, NISPLUSCB, NLM, NMPI, NNTP, NTP, NULL, OSPF, OXID, PAP, PGM, PIM, POP, PORTMAP, PPP, PPPOED, PPPOES, PPTP, Q2931, Q931, QUAKE, QUAKE2, QUAKEWORLD, RADIUS, RANAP, REMACT, RIP, RIPNG, RLOGIN, RPC, RQUOTA, RSH, RSVP, RTCP, RTMP, RTP, RTSP, RWALL, RX, SAP, SCTP, SDP, SHORT, SIP, SLARP, SLL, SMB, SMTP, SMUX, SNA, SNMP, SOCKS, SPRAY, SPX, SRVLOC, SSCOP, SSL, STAT, STAT-CB, STP, SUAL, SYSLOG, TACACS, TACPLUS, TCP, TELNET, TFTP, TIME, TNS, TPKT, TR, TRMAC, UDP, V120, VINES, VINES_FRP, VINES_SPP, VLAN, VRRP, VTP, WAP-WSP, WAP-WSP-WTP, WAP-WTLS, WCCP, WCP, WHO, WLAN, WLAN_MGT, X.25, X11, XOT, YHOO, YPBIND, YPPASSWD, YPSERV, YPXFR, ZEBRA

Output can saved or printed as plain text or PostScript.

Data display can be refined using a display filter.

Display filters can also be used to selectively highlight and color packet summary information.

All of part of each captured network packet can be saved to disk.

Zur Download-Seite.