Wireshark can be used for tracking packets across a network. It's almost required for tracing weird stuff.
== Warning ==
Ok, first things first:
http://archives.neohapsis.com/archives/openbsd/2004-11/2180.html
The important thing to read:
FB: ethereal was removed from the ports tree because "the ethereal team does
not care about security, as new protocols get added, and nothing gets done
about the many more holes that exist." I hope that this is not the beginning
of a hunting season to remove software because it's [insecure. That] will end
with a system that's secure because [it] can't do anything. I'm wrong, right?
Peter Valchev: You are in part correct.
There is more to it than that, but basically Ethereal is something that can potentially make your machine vulnerable. I suggest installing this on a Windows machine or something that you don't mind getting beaten into a pulp. While it is unlikely (is it really safe to say that?) it will happen, it _is_ something to be concerned about. Personally, I decided not to put it on a server, so it goes on my Windows XP Pro laptop.
== What's in a name? ==
Due to copyright / trademark reasons, the writers of Ethereal decided to change the name of the software to Wireshark. Very little mention of this is made on the original Ethereal website. From the
wireshark.org website:
Same developers, same code, different name. The Ethereal network protocol analyzer has changed its name to Wireshark.
== Getting Wireshark ==
You can get Wireshark from:
http://www.wireshark.org/download.html
== Examples ==
Some examples to come here soon!
Recent comments
11 weeks 3 days ago
11 weeks 5 days ago
24 weeks 17 hours ago
24 weeks 1 day ago
39 weeks 5 days ago
47 weeks 4 days ago
47 weeks 4 days ago
49 weeks 6 hours ago
51 weeks 2 days ago
1 year 26 weeks ago