Re: Packet analysis and protocol analysis

[Carlos Fernandez Sanz <cfs-sec-basics () securityfocus com>]

The output varies from protocol to protocol. I suggest you start with a 
filter that captures only the traffic from/to your own box, and only for 
one protocol. Then play a bit, i.e. if you start with HTTP then browse 
some pages, if you use MSN then chat a bit...

If you want to write your own sniffer of something, start by looking at 
some source code.

For MSN, I wrote a small sniffer which is quite easy to understand (in 
code), you can get it here if you want : 
http://sourceforge.net/projects/im-snif/

Take a look at it. Nothing fancy but you can learn from it.




Ramki B wrote:

> I am trying to understand network packet analysis and exprimenting with
> Etherreal. I have a captured file and i do not to understand the output , is
> there any references in can look into for packet analysis and protocol
> analysis?
>
> Thanks...
>
>
>
>
>