Calling my geek friends - protocol analysis tools?

[drwex]

I'm looking for samples - screenshots if possible - of tools you consider good examples of easy to use protocol analysis tools. This can be any sort of protocol from an IP stack to an HTTP traffic stream to a natural language syntactic breakdown. If you've used such a tool and think it's good let me know about it.

Comments

[inahandbasket]

I like the way wireshark deals with large piles of network traffic.

[rmd.livejournal.com]

this. the "follow tcp stream" is pretty excellent.

also, the ssldump on (at least) f5 does a good job of showing all the encrypted certificate handshaking.

[intuition-ist.livejournal.com]

netintercept, now most probably distributed by niksun. wicked easy to use -- plug it in, collect some traffic, swipe a timerange, and let it crunch the data. it's $$$ tho.