Re: Sniffers Class:Need data visualization ideas

[Adrian Crenshaw <irongeek () irongeek com>]

I was handed a DVD from InGuardians while at Shmoo that has a lot of the
tools called Packetrix, and ripped my own ISO of it. Unfortunately, the SF
project site has no files to download, and the site mentioned on the DVD
sleeve (http://packetrix.inguardians.com/) does not seem to be up.

Thanks,
Adrian

On Tue, Feb 22, 2011 at 6:27 AM, Doug Burks <doug.burks () gmail com> wrote:

> Great suggestions so far.  In addition, you might want to consider the
> following:
> chaosreader
> netsed
> ngrep
> p0f
> xplico
>
> You didn't specifically mention IDS, but Squert has some nice alert
> visualization capabilities.
>
> <shameless plug>
> These utilities can be found in my Security Onion distro:
> http://securityonion.blogspot.com/
> </shameless plug>
>
>
> On Mon, Feb 21, 2011 at 12:54 PM, Robin Wood <robin () digininja org> wrote:
> > On 21 February 2011 12:12, Adrian Crenshaw <irongeek () irongeek com>
> wrote:
> > > Hi all,
> > >    My local ISSA is holding a sniffers class. Gary and I plan to cover
> the
> > > usual suspects: Wireshark, TCPDump, Ettercap, Cain, NetworkMiner,
> Firesheep,
> > > etc. Got any good suggestions for other tools, especial ones that help
> > > visualize what it happening? Has to be free/opensource and something
> easy to
> > > fire up on a box with little prep.
> >
> > driftnet is good but was a little flaky the last time I used it.
> >
> > dsniff for showing passwords going across the wire.
> >
> > Robin
> > _______________________________________________
> > Pauldotcom mailing list
> > Pauldotcom () mail pauldotcom com
> > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > Main Web Site: http://pauldotcom.com
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom () mail pauldotcom com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com