Re: [PEN-TEST] tcpdump question ?

[Jose Nazario <jose () BIOCSERVER BIOC CWRU EDU>]

On Tue, 27 Feb 2001, cdowns wrote:

> what is he best tool to decode a tcpdump -s 0 -w sniff_test -i eth0
> -vvv session ? thanks in advance

depends on specifics, but often ethereal is AWESOME due its protocol
decodes. it reads tcpdump files just fine. :)

otherwise i usually start slogging through the tcpdump output in
perl/awk/grep. i'm a fan of too much data that way.

____________________________
jose nazario                                                 jose () cwru edu
                     PGP: 89 B0 81 DA 5B FD 7E 00  99 C3 B2 CD 48 A0 07 80
                                       PGP key ID 0xFD37F4E5 (pgp.mit.edu)