Re: learning sniffer skills

["Jon Lawhead" <samurai () berkeley edu>]

Most good sniffers will dump the capture results in Hex, Dec, and ASCII.  If you're sniffing 
something that's transmitted in plaintext (e.g. pop3), then you can just look at the ASCII field 
to see the information.  If the sniffer you're using doesn't support ASCII, you can either convert 
the hex results into ASCII, or get a sniffer that does.  I'd recommend ethereal, personally.


Jon Lawhead
UC Berkeley SINE/Rescomp

On Thu, 09 Dec 2004 13:00:50 -0500
 "Carlos Mario Mora (c4y0)" <c4y0 () yahoo com mx> wrote:
> hi!
>
> Im starting to learn use a sniffer, but now im stopped with the method
> to read the sniffer output.
>
> Im trying read with tcpdump or snort the mail messages downloaded by
> pop3.  But can see the message content.    How can "assembly" the
> message readed with the sniffer?
>
> Thanks in advance.
> --
> Carlos Mario Mora (c4y0) <c4y0 () yahoo com mx>
> GiGaX