Welcome to the MacNN Forums.

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

You are here: MacNN Forums > Software - Troubleshooting and Discussion > macOS > Snoop?

Snoop?
Thread Tools
mbordas
Junior Member
Join Date: Jun 2000
Location: new york
Status: Offline
Reply With Quote
Jun 24, 2002, 09:10 PM
 
Does anyone know if there is a command in os x simlar to snoop, and what it is?
I was trying to debug this network problem i was having, and was quite upset that i had to switch to my sun to run snoop :-(

mbordas
I don't suffer from insanity, I enjoy every minute of it.
     
juanvaldes
Addicted to MacNN
Join Date: Mar 2001
Location: Seattle, WA
Status: Offline
Reply With Quote
Jun 24, 2002, 11:01 PM
 
I'm not sure what snoop is but if you need to look at packets you might want to checkout <a href="http://www.versiontracker.com/moreinfo.fcgi?id=13007&db=mac" target="_blank">MacSniffer</a>.
The spirit of resistance to government is so valuable on certain occasions, that I wish it always to be kept alive.
- Thomas Jefferson, 1787
     
mbordas  (op)
Junior Member
Join Date: Jun 2000
Location: new york
Status: Offline
Reply With Quote
Jun 24, 2002, 11:26 PM
 
</font><blockquote><font size="1" face="Geneva, Verdana, Arial, sans-serif">quote:</font><hr /><font size="1" face="Geneva, Verdana, Arial, sans-serif">Originally posted by juanvaldes:
<strong>I'm not sure what snoop is but if you need to look at packets you might want to checkout <a href="http://www.versiontracker.com/moreinfo.fcgi?id=13007&db=mac" target="_blank">MacSniffer</a>.</strong></font><hr /></blockquote><font size="1" face="Geneva, Verdana, Arial, sans-serif">perfect, thats exactly what i was looking for, thanks!

mbordas
I don't suffer from insanity, I enjoy every minute of it.
     
Kristoff
Mac Elite
Join Date: Sep 2000
Location: in front of the keyboard
Status: Offline
Reply With Quote
Jun 25, 2002, 03:42 AM
 
</font><blockquote><font size="1" face="Geneva, Verdana, Arial, sans-serif">quote:</font><hr /><font size="1" face="Geneva, Verdana, Arial, sans-serif">Originally posted by mbordas:
<strong> </font><blockquote><font size="1" face="Geneva, Verdana, Arial, sans-serif">quote:</font><hr /><font size="1" face="Geneva, Verdana, Arial, sans-serif">Originally posted by juanvaldes:
<strong>I'm not sure what snoop is but if you need to look at packets you might want to checkout <a href="http://www.versiontracker.com/moreinfo.fcgi?id=13007&db=mac" target="_blank">MacSniffer</a>.</strong></font><hr /></blockquote><font size="1" face="Geneva, Verdana, Arial, sans-serif">perfect, thats exactly what i was looking for, thanks!

mbordas</strong></font><hr /></blockquote><font size="1" face="Geneva, Verdana, Arial, sans-serif">Actually...the equiv to snoop is tcpdump.

But you mac people and your GUI's.... <img border="0" alt="[Skeptical]" title="" src="graemlins/bugeye.gif" />
signatures are a waste of bandwidth
especially ones with political tripe in them.
     
Gary Kerbaugh
Dedicated MacNNer
Join Date: Jul 2001
Location: NC
Status: Offline
Reply With Quote
Jun 25, 2002, 09:29 PM
 
&nbsp;&nbsp;&nbsp;I didn't know what snoop was but if you want a packet sniffer, I don't think there's a better one than Ethereal! If you really want to understand the packet, it's indispensable. It translates nearly every part of the packet into human readable form. It requires XWindows for the best version. Highlighting any part of any view highlights the correspinding parts of the raw, descriptive and text views.
&nbsp;&nbsp;&nbsp;There is a command line version that present;s all the information but the GUI version is much better.
Gary
A computer scientist is someone who, when told to "Go to Hell", sees the
"go to", rather than the destination, as harmful.
     
Kristoff
Mac Elite
Join Date: Sep 2000
Location: in front of the keyboard
Status: Offline
Reply With Quote
Jun 25, 2002, 10:17 PM
 
</font><blockquote><font size="1" face="Geneva, Verdana, Arial, sans-serif">quote:</font><hr /><font size="1" face="Geneva, Verdana, Arial, sans-serif">Originally posted by Gary Kerbaugh:
<strong>I didn't know what snoop was but if you want a packet sniffer, I don't think there's a better one than Ethereal! </strong></font><hr /></blockquote><font size="1" face="Geneva, Verdana, Arial, sans-serif">I agree.

I have found that tcpdump (comes with OS X) provides the best performance for capturing packets. You can write them to a file.

Then, I compiled Ethereal and run it under XTools.
I use Ethereal to open my files captured with tcpdump, then I can extract streams and look into the various parts of the frames. It provides information and data from all layers and can interpret the streams of many protocols.
signatures are a waste of bandwidth
especially ones with political tripe in them.
     
   
 
Forum Links
Forum Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Top
Privacy Policy
All times are GMT -4. The time now is 05:08 PM.
All contents of these forums © 1995-2017 MacNN. All rights reserved.
Branding + Design: www.gesamtbild.com
vBulletin v.3.8.8 © 2000-2017, Jelsoft Enterprises Ltd.,