Re: [PLUG] trapping web site communications

[Toby DiPasquale <toby@cbcg.net>]

gabriel rosenkoetter wrote:
> How is this better than tcpdump's -w?
>
> Why would you *want* some GUI front-end parsing and reformatting the
> data, when what you want to know is what actually came across the
> wire?

I am familiar with the source of etheral and I can tell you that this is not 
what happens. ethereal mangles neither the format nor the content of the data 
in the packets it displays. The GUI is simply to help you visualize and 
dissect the data in the packet capture. What you see in ethereal is what came 
over the wire. This is the case even for partial packets. Use ethereal at will 
and rest assured that you are not missing out on some arcane packet information.

--
Tobias DiPasquale
88FA 30C9 1E63 CFE2 CBD8  37C4 DA1C E2BF 1D26 F036
http://cbcg.net/

_________________________________________________________________________
Philadelphia Linux Users Group        --       http://www.phillylinux.org
Announcements - http://lists.netisland.net/mailman/listinfo/plug-announce
General Discussion  --   http://lists.netisland.net/mailman/listinfo/plug