vote up 2 vote down star
1

I have Wireshark and have used tcpdump, but I was wondering if there was a nice GUI to capture and view packets on the Mac. Ideally, something that is protocol aware, so that it knows how to break up an HTTP request, is able to show SMTP information in a cleaner way than a tcp dump. I know there are a number of HTTP specific tools that fit this bill, but I'm looking for something that is more general.

flag

75% accept rate

2 Answers

vote up 3 vote down

Just to make sure you're not missing the obvious...you're aware that Wireshark does have a nice GUI, and is protocol aware? And has simple analysis features like "Follow TCP Stream" that making analyzing SMTP (and other text-based protocol transactions) so much easier?

Screenshots are here.

link|flag
I totally agree. For example CocoaPacketAnalyzer from tastycocoabytes.com/cpa might look better for some, but it's so much harder to do proper filtering once one knows what Wireshark can do. – Arjan van Bentem Nov 29 at 20:29
Yes. I'm really looking for alternatives to Wireshark, though with a similar set of features. I can usually get Wireshark to do what I need, but it always takes a while to get there, especially if I haven't used it in a while. I was hoping for something simpler to use, even if a bit less powerful. – Tim Nov 29 at 20:36
vote up 1 vote down

There are quite a few. The search on macupdate turns up some of them:

link|flag

Your Answer

Get an OpenID
or
never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.