10.13 has an expression builder for building your filters. And ip.src==10.10.10.1 isn't that complex a syntax :-)
Cheers Ken -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond Sent: Wednesday, 7 December 2005 3:45 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] LDAP Traffic Replay I can't figure out the filtering thing in ethereal. Netmon works great for me, and the installer is on at least one server in every wan site I have. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Tuesday, December 06, 2005 11:13 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] LDAP Traffic Replay Yeah I have the full netmon available to me but Ethereal kind of punks netmon out. I stopped using netmon a couple of years ago now. ;o) Either way, both are simple monitors and that is a very small piece of what I need. The hard parts are the breaking out into a replayable format and replaying. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Schofield Sent: Tuesday, December 06, 2005 10:59 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] LDAP Traffic Replay Etherpeek is a network based tool. I think that is what wildpackets reference is but not sure. I have NO idea but if you have SMS 2003 in your environment they have a full-fledged network scanner. Its free and if you have it might be worth checking out. good luck. Steve Schofield Microsoft MVP - ASP/ASP.NET ASPInsider Member - MCP http://www.orcsweb.com/ Managed Complex Hosting #1 in Service and Support ----- Original Message ----- From: "joe" <[EMAIL PROTECTED]> To: <ActiveDir@mail.activedir.org> Sent: Tuesday, December 06, 2005 12:31 PM Subject: [ActiveDir] LDAP Traffic Replay > Is anyone aware of a tool that will sit and watch LDAP traffic and track > the > threads/clients/etc and then be able to replay that traffic? > > Basically I am looking for a way to better judge DC perf in relation to > Exchange LDAP queries. Setting up a whole Exchange environment to test the > DCs is testing both Exchange and the DC and I am looking to try and narrow > that to just AD so I can answer some of the questions of GC/DC capacity > better than the 4:1 ratio business which everyone says isn't that great > but > doesn't seem to have anything easy to do that is better. I would like to > track traffic to production GC/DCs and then be able to replay that LDAP > load > as desired over and over again against various pieces of hardware with > different configs. List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/