Wireshark · Ethereal-users: [Ethereal-users] Question on Ethereal capabilities

["Woeltje, Donald" <dwoeltje@xxxxxxxxxxx>]

I have limited exposure to Ethereal (which I’m attempting to correct). I have some rudimentary questions.

 

1. Does Ethereal have an “expert mode” analysis capability…….or is the user the “expert mode”?

 

2.   Is Ethereal a protocol analyzer only? I’ve been told that can also operate as an IDS. But I don’t see how that’s possible…..unless you just have it capture everything and then you spend hours analyzing the traffic for potential security events.

 

Don Woeltje

Senior Information Security Analyst

CISSP, MCSE, CNE, CCNA, CNX, DCVE, 3Com 3Wizrard

Location 2G-420, Carlson Technology Center

1405 Xenium, Minneapolis, MN

Work Ph# 1-763-212-2684