Search results for query: *

I haven't heard about any plans to get the Sniffer Distributed Agent on 2k. However, as mentioned by Owen, it seems that there's some kind of Beta version of the XP agent floating around at some customer sites.

Patrick, Reporter is only a rudimentary short term solution. For advanced features, Visualizer is the way to go. Maybe you can take a look at the feature set and possibly get an eval version? Ravi.

Thanks Alf - that was very helpful. P

Patrick, Thanks for the cool write up - it was very informative. FYI, I think you can also authenticate with nPO manager, in addition to Radius. Cheers, P

This is a related question that I think Owen will be able to help out with. Can anyone help me figure out where matrix switches fit in and how they relate to port mirroring? Thanks, P

I have one minor correction to Owen's comment... Anything you can do using ProbeViewer, you can do via SniffView by right clicking the agent and selecting Configure. The only reason you would need to use RD32, DameWare or VNC would be if you wanted to do things like launch windows explorer...

Hi, I would not recommend installing any other remote control software on the agent as it may cause conflicts with the code. The best bet might be to use RD 32 as it has been tested and is supported. My 2 cents, Portable.

Patrick, You can use a tool called RD 32 which comes pre-installed on the Agent. The RD32 client installable should be available on the Console Installation folder or the application CD. This tool is similar to DameWare and is used by S4000 customers to manager remote 'headless' devices the way...

The best way to find out what exactly is happening on the NW is to have sniffers on the client and server segments, run captures and use the Multi Trace Option feature of the Sniffer nPO Manager product to trace a packet from client to server and back and find out where the bottleneck is. Maybe...

Sorry - I meant do you need a cross-over cable to connect to channel B?

Do you need a passthrough cable to connect to channel B?

Here's what I know about the FDX card... The FDX card has 256 MB on board buffer to allow for high speed capture at near line rate. It also has an FPGA that allows a certain amount of hardware filtering. The card has 2 channels that can be used in either end station or pass through mode. The...

Couldn't you just use the new Distributed topology 'EFD1' to do full deplex analysis...?

Guys, Sorry for the late response, but I think Sniffer Distributed 4.3 now supports the FDX card as a replacement to the FDX pod. Check out the ReadMe posted by Alf in another thread or visit the Sniffer Distributed web site. Portable.

Check out a new Sniffer Product - InfiniStream™ Security Forensics, with features similar to the ones pointed out by Spence... http://sniffer.com/products/infinistream/default.asp?A=5 Here's an extract from the site... 'The InfiniStream™ Security Forensics solution provides historical archival...

Owen, I have a comment on one of the cons you mentioned - 'They STILL don't have a good solution for Distributed full duplex 100mb over copper analysis - the current answer is a four port Ethernet Sniffer w/special drivers that bind pairs of monitor cards together so the ET05 works as a dual...

I've heard that the next version of Sniffer Distributed Console will be supported on XP.

This issue may have been resolved in PDK 4.7 - ask your Sniffer contact if this is the case.

Yes, you will need a bsaci level of failiarity with C programming and VC++ 6. Maybe you can used Kernighan & Ritchie for C and VC++ Unleashed to learn more.

PDK has also been updated for Portable 4.7 and is available at http://www.sniffer.com/naicommon/download/upgrade/sniffer/snifferpdk47.asp