Tool of the Day: Wireshark
Wireshark is a free and open-source packet analyzer. It is used for
networktroubleshooting, analysis,
software and communications protocol development, and education. Originally
named Ethereal, in May
2006 the project was renamed Wireshark due to trademark issues.
Wireshark is cross-platform, using the GTK+ widget toolkit to implement
its user interface, and
using pcap to capture packets; it runs on various Unix-likeoperating systems
including Linux, Mac OS X, BSD, and Solaris.
- Data can be captured "from the wire" from a live network connection
or read from a file thatrecorded already-captured packets.
- Live data can be read from a number of types of network, including
Ethernet, IEEE 802.11, PPP, and loopback.
- Captured network data can be browsed via a GUI, or via the terminal
(command line) version of the utility, TShark.
- Captured files can be programmatically edited or converted via
command-line switches to the "editcap" program.
- Data display can be refined using a display filter.
- Plug-ins can be created for dissecting new protocols.
- VoIP calls in the captured traffic can be detected. If encoded in a
compatible encoding, the media flow can even be played.
- Raw USB traffic can be captured.
version: wireshark 1.8.3
size: 14.9 MB to download, 62.2 MB when installed
home page: http://www.wireshark.org/
screen shot: http://ubuntu.allmyapps.com/screenshots/wireshark
regards,
dhanasekar
