Several very good protocol analyzers are available. Three of the most popular ar
ID: 3914297 • Letter: S
Question
Several very good protocol analyzers are available. Three of the most popular are Wireshark (www.wireshark.org), which is an open source product, Microsoft Message Analyzer (www.microsoft.com/en-us/download/details.aspx?id=44226), and Colasoft Capsa (www.colasoft.com/capsa), which has a free version along with an Enterprise and Professional edition. Research these three protocol analyzers and compare their features. Next download and install each product, and perform a basic protocol analysis (there are several free tutorials available regarding how to use these tools). Create a document that lists the features and strengths of each product. Which would you prefer? Why?
Explanation / Answer
Answer)
A protocol analyzer is used for detecting and determing a malicious software, to troubleshoot a problem , baseline the traffic patterns , creating the traffic for penetration testing, to work with Honeypot and learning about networks and also locating any unauthorized traffic and messages.
Some of the protocol analyzer are as follows;
1) Ethereal : It is present for unix/ Linux as well as window. The GUI is way too easy to access and smooth to navigate.
It shows all the traffic network and it supports 512 different specific protocols.
It also decodes many familiar protocols.
2) Fluke network Optiview protocol :
It is a hand hold protocol analyzer which gives a protocol analysis for packets and takes the traffic off the Ethernet or fiber tapped network and token ring.
3) Protocol Expert : This is indeed a capable analyzer but the UI would need some changes for this.
After looking the specifications one would consider the Ethereal.
Hit like if you find the answer useful.
Hope this answer helps.
Related Questions
drjack9650@gmail.com
Navigate
Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.