From owner-freebsd-questions  Wed Dec  2 12:16:53 1998
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id MAA28966
          for freebsd-questions-outgoing; Wed, 2 Dec 1998 12:16:53 -0800 (PST)
          (envelope-from owner-freebsd-questions@FreeBSD.ORG)
Received: from samizdat.uucom.com (samizdat.uucom.com [198.202.217.54])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id MAA28960
          for <freebsd-questions@FreeBSD.ORG>; Wed, 2 Dec 1998 12:16:51 -0800 (PST)
          (envelope-from cshenton@uucom.com)
Received: (from cshenton@localhost)
	by samizdat.uucom.com (8.9.1/8.9.0) id PAA22536;
	Wed, 2 Dec 1998 15:16:15 -0500
To: Riccardo Veraldi <riccardo@righi.ml.org>
Cc: Roman Katsnelson <roman@atlas-design.net>,
        "q's" <freebsd-questions@FreeBSD.ORG>
Subject: Re: sniffer
References: <Pine.BSF.4.05.9812021952230.6568-100000@righi.ml.org>
From: Chris Shenton <cshenton@uucom.com>
Date: 02 Dec 1998 15:16:15 -0500
In-Reply-To: Riccardo Veraldi's message of Wed, 2 Dec 1998 19:52:59 +0100 (CET)
Message-ID: <867lwacnao.fsf@samizdat.uucom.com>
Lines: 11
X-Mailer: Gnus v5.5/Emacs 20.2
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Riccardo Veraldi <riccardo@righi.ml.org> writes:

> Instead I Recompile the kernel for put the dether device in no promiscous
> mode
> but still I did not found a good sniffer can someone suggest me nore pleae

Tcpdump's the standby, but I find 'sniffit' to be lots of fun. Can
decode/display sessions on the fly; uses curses to show you what's
going on. Great for finding out what all those whining users are
*really* looking at ;-)


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message