From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from dukecmmtar01.coxmail.com (dukecmmtar01.coxmail.com [68.99.120.48]) by speech.braille.uwo.ca (Postfix) with ESMTP id DB0AF10A2E for ; Thu, 12 Jun 2008 11:59:17 -0400 (EDT) Received: from [192.168.0.100] (really [70.166.17.50]) by dukecmmtar01.coxmail.com (InterMail vM.6.01.06.01 201-2131-130-101-20060113) with ESMTP id <20080612155918.ECUE28132.dukecmmtar01.coxmail.com@[192.168.0.100]> for ; Thu, 12 Jun 2008 11:59:18 -0400 Message-ID: <485147E8.90403@baechler.net> Date: Thu, 12 Jun 2008 08:59:36 -0700 From: Tony Baechler User-Agent: Thunderbird 2.0.0.14 (Windows/20080421) MIME-Version: 1.0 To: "Speakup is a screen review system for Linux." Subject: Re: Tshark and like tools References: <020f01c8cc37$fc0012f0$6500a8c0@amd3000xp><1213263489.15029.5.camel@violet.perfumed-garden.local> <4850F7E9.5000604@baechler.net> <3B7C62C18CFB4F17A889F5520C335B52@liberator> In-Reply-To: <3B7C62C18CFB4F17A889F5520C335B52@liberator> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: speakup@braille.uwo.ca X-Mailman-Version: 2.1.10 Precedence: list Reply-To: "Speakup is a screen review system for Linux." List-Id: "Speakup is a screen review system for Linux." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Jun 2008 15:59:18 -0000 Sean Murphy wrote: > Has anyone written any tools to simplify the use of Tshark or any > other network protocol analyzing text based tools under Linux? > > I am seeking tools to be able to trace TCP or UDP conversations. > Determining the round trips of packets. Finding out what protocols > are being used by whom and where too. Etc. Hi, You didn't mention what distro you're using, but I can say that there are several Debian packages to do what you want. You might want to look at the grml live CD as it comes with many of them already installed and running. I don't have a list of the packages but I ended up removing several dozen. You could look at http://grml.org/ and see if the list of packages is online and go from there. My mind is going blank as to the names of some of them. One is nessusd or similar but it is non-fre I think. You could also look at the "harden" Debian package and specifically its dependencies. That might also give some ideas. You could browse through the "Net" section as well. If your distro has a package search ability, you could search for network security or similar. There are many programs out there to do what you want. Obviously, Google is your friend here.