At 08:07 12/04/01 -0400, Jose Nazario wrote:
>[snip]
>
>sure, but a good sniffer will help them learn how IP sessions work. when
>they're trying to learn how a three way handshake works, they shouldn't
>have to worry about hex -> ASCII conversions.
you can use tcpshow on tcpdump output. no X11 windows, but quite nice
decoding... the source is one C file that's trivial to compile and you can
do things like
tcpdump -i ef0 -lenx .... | tcpshow -cooked -data | more
then you can just script the output to filter it (if needed) or to change
the outpput format (such as droping the handshake stuff and so...)
cheers,
mouss
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
