Network Analysis

Some of our favorite Links

Software Firewalls:

  • IP Filter is a software package used to provide NAT or firewall services
  • IP Filter Based Firewalls HOWTO
  • FIRESTARTER is a complete firewall tool for Linux machines. Firestarter provides a clean and powerful interface for quickly creating a firewall and getting it started.
  • Firestarter: 5 minutes to a Linux firewall
  • Coyote Linux and Wolervine Firewall
  • Linux Firewall Configuration Tool
  • Linux LAN and Firewall FAQ
    •

    Intrusion Detection:

  • SNORT: The Open Source Network Intrusion Detection System services
  • Hands on Intrusion Detection FAQ: SNORT
  • Flying Pigs: Snorting Next Generation Secure Remote Log Servers over TCP/li>
  • EnGarde is a secure distribution of Linux engineered from the ground up to provide organizations with the level of security required to create a complete corporate online presence
  • Fingerprinting Web Server Attacks Using EnGuard
  • Network Intrusion Detection Signatures, Part One
  • Network Intrusion Detection Signatures, Part Two
  • Network Intrusion Detection Signatures, Part Three
  • Intrusion Detection FAQ from SANS
  • Complete Snort-based IDS Architecture, Part One
  • NEOHAPSIS Snort Archives
    •

    Pocket PC 2002 based Sniffers:

  • AirMagnet Handheld, wireless network administration and diagnostic tools
  • Packetattack's Wireless Page
  • Handalyzer, Windows CE powered Pocket PC solution withl the functions of an ethernet network analyzer
  • CEMyNetwork (formerly CENiffer) is able to monitor and filter all packets
  • Socket offers the world's widest selection of plug-in products for Windows Powered Pocket PCs, Handheld PCs, and Windows Notebooks
    •

    Windows based Sniffers:

  • NEW- LinkFerret LinkFerret Ethernet Packet Sniffer and Protocol Analyzer designed from the ground up with ease and functionality in mind.
  • NEW- Sniff'emSniff'em™ is a competitively priced, performance minded Windows based Packet sniffer and Network analyzer, a revolutionary new network management tool designed from the ground up with ease and functionality in mind.
  • The defacto standard NAI Sniffer Portable
  • Ethereal 10.10 with WinPcap packetdriver- FREE -
  • Ethereal User Manual
  • Sniffer FAQ
  • WildPackets EtherPeek Sniffer (also for the Mac!!)
  • Win Sniffer 1.2, The most efficient and reliable password sniffer
  • Agilgent Advisor Sniffer... 45 day trial
  • Sniff-em - A NAI Sniffer *clone*, complete with disclaimer
  • Observer
  • Ettercap is a multipurpose sniffer/interceptor/logger for switched LAN
  • Packetyzer is a Ethereal based FREE Sniffer for your LAN
  • WinDump - TCPdump for Windows LAN
    •

    Unix based Sniffers:

  • APS means Advanced Packet Sniffer
  • Ethereal For Redhat Linux
  • Ethereal For SuSE 8.0
  • Ethereal For OpenBSD
  • Ethereal For AIX
  • Ettercap is a multipurpose sniffer/interceptor/logger for switched LAN
    •

    Sniffer Tools and Network Analysis:

  • Sniffers: What are they and How to Protect From Them
  • The Secrets of Snoop
  • Overcoming the difficulties of Packet Capturing on a Switched Network
  • Public Packet Analyzer
  • Public Packet Analyzer Packet Driver (REQUIRED)
  • Public Packet Analyzer Docs
  • Click Here For a window with various sample sniff traces
  • Using History Samples for Trend Analysis in Sniffer Pro
  • Using Excel to Graph Sniffer Pro History Samples
  • Understanding 802.11 Frame Types
  • Using Sniffer to Troubleshoot Network Security- whitepaper by NAI
  • Denial of Service Attacks
  • Email Bombing and Spamming
  • SYN Flooding and IP Spoofing
  • UDP Denial of Service Attack
  • Email Forging and Spoofing
  • What is the TFTP protocol. Nice tutorial from a friend of ours
  • What is the ICMP protocol. Nice tutorial from a friend of ours
  • Active FTP vs. Passive FTP, a Definitive Explanation
  • Basic Sniffer Filters by Laura Chappell
  • Advanced Sniffer Filters by Laura Chappell
    •

    Websites:

  • Firewalls CX run by a good friend of ours
    •

    What is ? - Network Tool Screen Shots

  • Sniffit
  • NMAP GUI Frontend
  • EtherPeek
    •