Re: [PEN-TEST] Protocol Sniffer on PPP interface

[Marnix Petrarca <Mxp () MULTIWEB NL>]

Hi,

have you ever heard of Progress Software Protospeed Protocol Analyser?? It
works with Socks and can do some nice thingies - I've had it for a long
time. Actually I have an evaluation-copy from them directly (I am from
www.lemaxnl.com (we sell progging tools various langs for 16 Yrs in The
Netherlands)).

Mine is version 2.0 batch #1. It is a Windows product, and required Sun Java
SDK or Java VM to run in debugging (sniffing) mode.

Let me know what you find. It runs on Win95 and NT and is dated 1998. Don't
know what it costs.

Good luck, bye -- Marnix

 -----Original Message-----
From:   Penetration Testers [mailto:PEN-TEST () SECURITYFOCUS COM]  On Behalf Of
Ryan Permeh
Sent:   Tuesday, October 10, 2000 5:36 PM
To:     PEN-TEST () SECURITYFOCUS COM
Subject:        Re: [PEN-TEST] Protocol Sniffer on PPP  interface

there is not a public sniffer that i know ofthat supports windows RAS as a
device.  The specs and protocols are all closed, so someone inside microsoft
would have to develop this or an interface to this before any sniffer
vendors can produce a sniffer on this hardware. And, as a side note, i did
not beleive that sniffer pro worked on w2k yet, is there a recently released
version?
Signed,
Ryan
eEye Digital Security Team
http://www.eEye.com

----- Original Message -----
From: "Curphey, Mark (ISS Atlanta)" <MCurphey () ISS NET>
To: <PEN-TEST () SECURITYFOCUS COM>
Sent: Monday, October 09, 2000 1:04 PM
Subject: Protocol Sniffer on PPP interface


> Sat on the end of a dismal 56k dial-up I fired up some sniffers to look at
> how a web based app works.
>
> On my win2k laptop I usually carry "analyzer" (which is awesome), "tcp
> dump", "sniffer pro" and "ethereal" (I have left my Linux laptop at home).
>
> None of these seem to allow me to look at the traffic across the PPP
> interface.
>
> Any ideas ?