Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I mostly develop network analysis software, and sometime I need to do some deep protocol analysis which is basically to reverse engineer a network protocols.

Currently, I am working with wireshark + 010 Editor.

Wireshark, is a good sniffer, but it has its flaws. for instance I wish it could show gzip session after extraction (it shows the decompressed data in the data bytes, but you can't see a connection flow, or search within the decompressed data).

I have no complains about 010 editor that I can think of, but if someone know about other tools (maybe automatic analysis) please let me know.

share|improve this question

migrated from programmers.stackexchange.com Oct 10 '11 at 23:13

This question came from our site for professional programmers interested in conceptual questions about software development.

    
Which OS/platform? –  Noldorin Oct 10 '11 at 23:22

1 Answer 1

up vote 0 down vote accepted

Which OS are we talking about here? Wireshark is an excellent cross-platform open-source packet sniffer, but does indeed have its flaws are you say.

I personally use Microsoft Network Monitor (currently version 3.4), having previously used Wireshark. It's obviously specifically for Windows, but I feel it does a particularly nice job. It feels like a more lightweight program, and has a very usable user interface. Definitely worth a play-around if you're on Windows.

share|improve this answer
    
both linux and windows, but thanks, I'll check it out –  Guy L Oct 11 '11 at 5:35

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.