Sniffing

[tain]

Cnet has an article about a soon-to-be-released sniffer called Ferret that may compete with Wireshark. Wireshark does an amazing job so I'm wondering how the proposed features will help Ferret stack up against the champ. It appears to be free and open source.

http://news.com.com/Your+Wi-Fi+can+tell+pe..._3-6163666.html

"You don't realize how much you're making public, so I wrote a tool that tells you," said Robert Graham, Errata's chief executive. The tool will soon be released publicly on the Black Hat Web site. Anyone with a wireless card will be able to run it, Graham said. Errata also plans to release the source code on its Web site.

The Errata sniffer, dubbed Ferret, packs more punch than other network sniffers already available, such as Ethereal and Kismet, because it looks at so many different protocols, Graham said. Some at Black Hat called it a "network sniffer on steroids."

Snoops can use the sniffer tools to see all kinds of data from wireless-equipped computers, regardless of the operating system.

For example, as a Windows computer starts up, it will emit the list of wireless networks the PC has connected to in the past, unless the user manually removed those entries from the preferred networks list in Windows. "The list can be used to determine where the laptop has been used," Graham said.

[nitroshift]

TAiN, do you know of any (good) program that lets me sniff LAN packets? Thanks.

[cluberti]

Any network sniffer app that can work with your NIC in promiscuous mode is good - wireshark, netmon come to mind, and those are the two I use.

[nitroshift]

Thanks cluberti.

[tain]

Wireshark has never failed me

[nitroshift]

Wireshark has never failed me

I just downloaded it....