Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I mostly develop network analysis software, and sometime I need to do some deep protocol analysis which is basically to reverse engineer a network protocols.

Currently, I am working with wireshark + 010 Editor.

Wireshark, is a good sniffer, but it has its flaws. for instance I wish it could show gzip session after extraction (it shows the decompressed data in the data bytes, but you can't see a connection flow, or search within the decompressed data).

I have no complains about 010 editor that I can think of, but if someone know about other tools (maybe automatic analysis) please let me know.


migration rejected from Jan 24 '15 at 15:07

This question came from our site for professional programmers interested in conceptual questions about software development. Votes, comments, and answers are locked due to the question being closed here, but it may be eligible for editing and reopening on the site where it originated.

closed as off-topic by bwDraco, DavidPostill, Mokubai Jan 24 '15 at 15:07

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions seeking product, service, or learning material recommendations are off-topic because they become outdated quickly and attract opinion-based answers. Instead, describe your situation and the specific problem you're trying to solve. Share your research. Here are a few suggestions on how to properly ask this type of question." – bwDraco, DavidPostill, Mokubai
If this question can be reworded to fit the rules in the help center, please edit the question.

Which OS/platform? – Noldorin Oct 10 '11 at 23:22
up vote 0 down vote accepted

Which OS are we talking about here? Wireshark is an excellent cross-platform open-source packet sniffer, but does indeed have its flaws are you say.

I personally use Microsoft Network Monitor (currently version 3.4), having previously used Wireshark. It's obviously specifically for Windows, but I feel it does a particularly nice job. It feels like a more lightweight program, and has a very usable user interface. Definitely worth a play-around if you're on Windows.

both linux and windows, but thanks, I'll check it out – Guy L Oct 11 '11 at 5:35

Not the answer you're looking for? Browse other questions tagged .