[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Replacement for Ethereal



> 1.  Not to start a flame war, but why should "netdude"
>     be any less of a security risk that ethereal?
>     Taking raw unfiltered packets from the net is risky
>     business and is likely to remain so for some time.

it is just a parser/manipulation tool for (raw) tcpdump output files,
and does not require any privileges.  tcpdump as found in OpenBSD, on
the other hand, is privilege separated (see Espie's email)... so live
captures can be done too (and you can still manipulate packet fields
etc.) - even though you need privileges then, it's mostly just a tcpdump
anyway

> 2.  The best thing about Ethereal is Tethereal.  Many,
>     if not most, of us interact with OpenBSD in a text
>     environment.  Does Netdude support a text mode?

tcpdump.