IP Inspection - The little sniffer that could

• Inspecting IP traffic is usually done using a packet sniffer.
• A piece of software that can "catch" copies of IP packets directly at the interface level, log them and/or present them to the inspector.
• One such great software is called 'ethereal', and is accompanied by its little non-GUI sister, 'tethereal'.
• Note: a network sniffer copies IP packets - it does not disturb their normal path, so it should not cause network problems (other then slowing down the machine it is run on).

Originally written by guy keren