Ethereal-users: RE: [Ethereal-users] Disguised Ethereal?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Simon Hailstone" <Simon.Hailstone@xxxxxxxxxxxxxxxxxxx>
Date: Wed, 21 Jul 2004 16:05:56 +0100

> This product looks suspiciously like ethereal with a
> modfied UI.  Does anyone here know anything about it?
>
>http://www.etherdetect.com/features.htm



I just downloaded the demo version and had a quick look.
I think it is not derived from Ethereal.  It is using
WinPCAP though.

The executable is <600kB in size, and has a very limited
set of features.  I don't think it can dissect anywhere
near the number of protocols that Ethereal can, the
filters appear quite primitive, and none of the
statistic / analysis functions of Ethereal are present.

It does have one redeeming feature, in that the
"conversation" view works very well.

( I also like the way it uses little green lamps
  to represent TCP flags! )


Best Regards,

Simon Hailstone
Orthogon Systems