[sclug] Monitoring a P2P appliacation

[Patrick Kirk]

That sounds sensible but sadly the 'workstation is a headless laptop 
under a pile of books in the corner.

Leon Ward wrote:

> To make your live easier, move the file to a workstation with ethereal on
> it.
> The using the simple GUI you can inspect your capture.
> 
> 
> -Nard
> 
> 
> 
>>-----Original Message-----
>>From: Patrick Kirk [mailto:patrick at kirks.net]
>>Sent: 18 June 2003 11:30
>>To: lug at assursys.co.uk
>>Cc: Sclug
>>Subject: Re: [sclug] Monitoring a P2P appliacation
>>
>>
>>You may call me a thicko or weener but the fact that the man page for 
>>tethereal has 702 A4 pages (that's 41959 lines consisting of 87723 
>>words) has reduced my powers of concentration to those of the 
>>common or 
>>garden goldfish.
>>
>>Lets not mention that man libpcap and man tcpdump are both 
>>needed before 
>>even starting man tethereal :-()  And neither of those could 
>>be called 
>>bedtime reading for weeners either.
>>
>>So, does anyone know how I can write a filter file that captures all 
>>data of tcp port 6346 to 192.168.0.5 and outputs it to a file called 
>>phasar.log which will be no larger than 50MB.
>>
>>
>>lug at assursys.co.uk wrote:
>>
>>
>>>On Tue, 17 Jun 2003, Patrick Kirk wrote:
>>>
>>>
>>>
>>>>Hi all,
>>>>
>>>>I have a Debian firewall protecting a couple of Win XP 
>>
>>boxes behind a 
>>
>>>>firewall. The wife uses a little music swapping application 
>>
>>called Ares 
>>
>>>>which I'd like to monitor just to see how it works in terms of 
>>>>handshaking, etc.
>>>>
>>>>Can anyone suggest a console based linux app that would sit on the 
>>>>firewall and save all messages passed between her PC and 
>>
>>the Internet?
>>
>>>
>>>tethereal, part of ethereal? <http://www.ethereal.com>
>>>
>>>>Thanks.
>>>
>>>
>>>Best Regards,
>>>Alex.
>>
>>-- 
>>
>>Best regards,
>>
>>
>>Patrick Kirk
>>Mobile: 07876 560 646
>>
>>
>>_______________________________________________
>>sclug mailing list
>>sclug at sclug.org.uk
>>http://www.sclug.org.uk/mailman/listinfo/sclug
>>
>>This E-mail and its attachments have been scanned for viruses 
>>before delivery.
>>For more information contact postmaster at added-dimension.co.uk.
>>
> 
> 
> This E-mail and its attachments have been scanned for viruses before delivery.
> We recommend that all attachments are also checked by recipients before being viewed.
> For more information contact postmaster at added-dimension.co.uk.
> _______________________________________________
> sclug mailing list
> sclug at sclug.org.uk
> http://www.sclug.org.uk/mailman/listinfo/sclug

-- 

Best regards,


Patrick Kirk
Mobile: 07876 560 646