New Protocol Compiler

[AlexTovar]

Hi All:

As you know, when a non-standard protocol ( port TCP or UDP ) is decoded, we only can see it as "xxx bytes of TCP data", and nothing is seen above layer 4, that's in the Detail Window of Sniffer Expert System. Once I read there was a program in wich we can "compile" that non-standard protocol in prder to see it in the detail window ( e.g. ICQ Line 1; ICQ Line 2; etc. ), am I wrong ? does this software exist ? how can I use it and how install this "compilation" into the Sniffer Decode List ?

Thanks all in advance.

 

[rwullems]

Hi,
It is called the Sniffer Protocol development kit and can be free downloaded on the following link

http://www.sniffer.com/naicommon/download/upgrade/sniffer/snifferpdk45.asp

Is not very easy to work with. You need to know some programming. The manual is also there for download.
Robert Robert A.H. Wullems
Sniffer University Instructor
SCM / CNX / MCP
Citee Education
the Netherlands

 

[portable]

PDK has also been updated for Portable 4.7 and is available at

http://www.sniffer.com/naicommon/download/upgrade/sniffer/snifferpdk47.asp

 

[AlexTovar]

Hi again:

Many thanks for your answer, I downloaded it, but I need C++ right ? as you said, I need to do some programming, do you have any reference for C++ ?

Thanks again

 

[rwullems]

whoeps, i am sorry, i don't. Hopefully Portable as a programmer can help you on the way there.
Robert Robert A.H. Wullems
Sniffer University Instructor
SCM / CNX / MCP
Citee Education
the Netherlands

 

[portable]

Yes, you will need a bsaci level of failiarity with C programming and VC++ 6. Maybe you can used Kernighan & Ritchie for C and VC++ Unleashed to learn more.

 

[AlexTovar]

Ok guys, let me check and I'll let ou know.

Many thanks !!