"Gistcheckin" <Gistcheckin@discussions.microsoft.com> wrote in message
news:508571E2-8A1B-4E42-B359-B6E1E46BBCB6@microsoft.com...
> Microsoft® Windows® XP and Windows Server® 2003 include built-in network
> capture tools such as Netcap and Rasdiag that can capture local network
> traffic without having to install products such as Netmon or Ethereal.


Live and learn! I had not noticed rasdiag.exe before... Thanks. ; )


> Use
> tools such as Windows Network Monitor (NetMon) and Windows Sysinternals
> TDIMon for network data analysis. Windows Sysinternals tools can be
> downloaded from the Windows Sysinternals page on Microsoft TechNet.
> http://www.microsoft.com/technet/sec...01f590df3.mspx
>
> There is a tool called netcap.exe on the Windows XP CD (even for Home
> Edition) that can be used to make captures that you can read into Ethereal.
>
> You install netcap.exe by running setup.exe in the Support/Tools directory
> on the CD. The NetworkMonitor driver will
> be installed when you run netcap.exe.
>
> Description of the Network Monitor Capture Utility
> http://support.microsoft.com/?kbid=310875
>
> Ethereal
> http://www.ethereal.com/faq.html#q5.16


What do you think of this?

http://www.wireshark.org/faq.html#q1.2

In one thread last year when I mentioned Ethereal the poster found that instead,
downloaded it and then claimed her AV had detected something suspicious
in it.

Naturally today has to be the day when Google Groups is acting up
and the web interface appears to have purged the thread I'm basing
my recollection on. (So I can't give you a link to check.) ; ]


Robert
---