Re: Simple Packet Sniffer Help

From: Alan J. McFarlane (alanjmcf_at_yahoo.com)
Date: 05/22/03 

Date: Thu, 22 May 2003 15:54:53 +0100

Ed <glass walker theurge at juno dot com> wrote:
> Does anyone know of a freeware or ver cheap simple packet sniffer
> that will show source destination and url for pop,ftp and http(s)? I
> have tried a couple and they seem very complicated to get the little
> info that I need.

It doesn't sound to me that you want a packet sniffer at all, if you don't
want to look at precise packets that are sent, the contents of them or the
exact timings then you don't. If you just want to look at what connections
are being made then perhaps just running "netstat" (I always use "-n" too)
will do what you want. A continuous version of that would likely be then
useful, I /think/ that SysInternal TcpView is like that...

Of course I've ignored the "and url" bit, for that you would need to look
inside the packets but as you've found it is a lengthy process.

Your message also does not make clear whether you want to monitor you local
machine's traffic alone or whether you want to monitor multiple machines on
your LAN. If it the latter you'd have to run "netstat" etc on each
machine... :-( I think in this case your firewall & proxy logs are where
you want to be looking 

-- 
Alan J. McFarlane
http://homepage.ntlworld.com/alanjmcf/
Please follow-up in the newsgroup for the benefit of all.

Relevant Pages

  • hacked or spyware running
    ... a foreign http, before the system had even finsished starting up. ... So rebooted, this time straight into netstat, and there it is again. ... connecting to and it didn't find anything. ... Installed Ethereal (packet sniffer) want to get the login/password of the ...
    (microsoft.public.windowsxp.network_web)
  • Re: hacked or spyware running
    ... Michael wrote: ... > conneted to a foreign http, before the system had even finsished ... > So rebooted, this time straight into netstat, and there it is again. ... > Installed Ethereal (packet sniffer) want to get the login/password of ...
    (microsoft.public.windowsxp.network_web)
  • Simple Packet Sniffer Help
    ... Does anyone know of a freeware or ver cheap simple packet sniffer that will ... show source destination and url for pop,ftp and http? ...
    (microsoft.public.security)
Loading