Wireshark 1.0 Released
katterjohn writes "After almost 10 years of work, Wireshark 1.0 has been released. Wireshark is the award-winning protocol analyzer, formerly known as Ethereal. The release features several security fixes and an experimental package for Max OS X Intel."
would this still be illegal in Germany?
The higher the technology, the sharper that two-edged sword.
Whenever some product claims to be "award-winning", I always wonder what that award is. It's like the word "professional", that also lost its meaning. So, anybody have any pointers to any kind of "award"?
I wish I could sniff on multiple interfaces.
Or exclude specific interfaces from the pseudo-device available in some versions (like my linux copy)
Or filter out duplicate packets (not retransmissions, but the literal same packet: I bridged two interfaces, and the pseudo-device captures both the bridge and the bridge member)
Or just add localhost to a bridge.. why I can't do this is outside my understanding (until someone gives a crafty answer)
Or even just route all traffic destined for localhost through a physical interface first (I just want to capture all my packets, including localhost and a bridge with several ethernet members, but only once!)
Ah, it's on the wishlist. For another day, perhaps...
slashdot: where everyone yells sarcastic metaphors to themselves to understand the issue
I do a lot of Biztalk dev and I often need to send data to remote HTTP locations. Usually the outgoing message is transformed inside an outgoing pipeline and it is not always easy to see exactly what is being sent to the client. This is where WireShark has come in handy. I just monitor my ethernet interface for a few seconds. The results are usually colour coded and easy to read. Very useful tool.
http://projectleader.wordpress.com
Long story short: I had a SQL client app that tried to connect to the SQL server with a hard-coded password. I needed to know the password to set on the server. Fired up wireshark, found the password, set said password on the server, and it was a go.
his point is that the quality of these sorts of F/OSS releases is often on par with a commercial product that would now be release 8.12 - not just 8.0 feature-wise, but .12 because of the stability. when you go to show your phb why your company should use wireshark, tell them its only 1.0 and yet already has tons of features and stability not found in commercial products at 8.12 releases