The Ethereal Network Analyzer

1
The Ethereal Network Analyzer
2
What is it?

• tcpdump on steroids.
• Graphical user interface.
• Windows and Unix compatible.

3
How it works?

• Like tcpdump, it is a packet sniffer.
• Listens to traffic on a network and
  records/prints out the packets.
• Needs to read from the raw network device.
• Broadcast works better than switches.
• Switches limit the propagation of unnecessary
  packets, but some traffic can be seen over
  switches.

4
Installation

• On Windows
• Must install WinPcap 2.3
• http//winpcap.polito.it
• Then install Ethereal for Windows.
• http//www.ethereal.com/distribution/win32/etherea
  l-setup-0.9.3-1.exe
• Download and execute self-extracting installer.
  Follow simple on-screen directions.

• On Unix
• Download file to /usr/ports/distfiles
• http//www.ethereal.com/distribution/ethereal-0.9.
  3.tar.gz
• cd usr/ports/net/Ethereal
• make install
• Executable found in usr/ports/Ethereal/work/ethere
  al-0.8.19