Re: analyzing packets

["Nicolas Sigal" <bugtraq () localhost net ar>]

Lance,

        Try ntop, you can find it @ http://www.ntop.org, is a great tool to
sniff all your lan. You can see all the traffic and it makes  a nice web
report.


         Nicolas Sigal
LocalHost - Internet Services
 http://www.localhost.net.ar
   nsigal () localhost net ar


----- Original Message ----- 
From: "Lance Worthington" <lworthington () calltech com>
To: <security-basics () securityfocus com>
Sent: Tuesday, May 06, 2003 15:04
Subject: analyzing packets


What tools do most of you use to break down a packet. I'm able to catch
packets with tcpdump or etheral but from there I'm not sure what to do. Does
anyone recommend utils or low level white papers on the subject?

Lance


---------------------------------------------------------------------------
FastTrain has your solution for a great CISSP Boot Camp. The industry's most
recognized corporate security certification track, provides a comprehensive
prospectus based upon the core principle concepts of security. This ALL
INCLUSIVE curriculum utilizes lectures, case studies and true hands-on
utilization
of pertinent security tools. For a limited time you can enter for a chance
to win one of the latest technological innovations, the SEGWAY HT.
Log onto http://www.securityfocus.com/FastTrain-security-basics
----------------------------------------------------------------------------




---------------------------------------------------------------------------
FastTrain has your solution for a great CISSP Boot Camp. The industry's most 
recognized corporate security certification track, provides a comprehensive 
prospectus based upon the core principle concepts of security. This ALL INCLUSIVE curriculum utilizes lectures, case 
studies and true hands-on utilization 
of pertinent security tools. For a limited time you can enter for a chance 
to win one of the latest technological innovations, the SEGWAY HT. 
Log onto http://www.securityfocus.com/FastTrain-security-basics 
----------------------------------------------------------------------------