[61720] in North American Network Operators' Group
RE: Distributed sniffer products
daemon@ATHENA.MIT.EDU (Brennan_Murphy@NAI.com)
Wed Sep 3 16:13:59 2003
From: Brennan_Murphy@NAI.com
Date: Wed, 3 Sep 2003 13:01:52 -0700
To: <owen@delong.com>, <JAustad@temgweb.com>, <nanog@merit.edu>
Errors-To: owner-nanog-outgoing@merit.edu
The cost benefit analysis on Ethereal/etc vs Sniffer on anything
but the smallest of networks is usually very easy to make.
The fundamental issue is what questions do you have and=20
should you have about your network and what tool answers
those questions efficiently and reliably. Good protocol
analyzers sell because they save time in answering important
questions. Sniffer recently released a SMB Sniffer
called Netasyst...worth a look if cost has been an issue
in the past. So ends this biased response. :-)
-----Original Message-----
From: Owen DeLong [mailto:owen@delong.com]=20
Sent: Wednesday, September 03, 2003 2:50 PM
To: Austad, Jay; 'nanog@merit.edu'
Subject: Re: Distributed sniffer products
Etherial and other libpcap tools work reasonably well, can be easily=20
deployed
using commodity hardware, and would cost you a lot less than NetAssoc.
Owen
--On Wednesday, September 3, 2003 1:07 PM -0500 "Austad, Jay"=20
<JAustad@temgweb.com> wrote:
>
> Anyone have any experience with these? I'm looking for something=20
> similar to Network Associates Sniffer product.
>
> Are there any open source projects that are decent? What are others=20
> using?
>
> ----------------
> Jay Austad
> Senior Network Analyst
> Travelers Express / MoneyGram
> e: jaustad@temgweb.com p: 952.591.3779
