Sniffer Pro v4.7 has been released

[AlfSutherland]

Hi, Just to let everyone know Sniffer Pro v4.7 has now been released, and can be downloaded from

http://www.sniffer.com

The main new features are;
Full Duplex Ethernet PCI Card
Sniffer Book Ultra Gigabit Ethernet Support
802.11b Wireless LAN Sniffer Support
Additional Protocol Decodes
Protocol Enhancements
Monitoring Statistics on the Gigabit PCI Card
Expert Enhancements

 

[DTMan]

Alf,

I have downloaded and tested this version. Some of the things that I have experienced are pretty aggravating. Listed in the known problems section is the following statement.
When opening large capture files, the Decode tab (on the Expert window) may appear blank for several seconds (30-45 seconds) before the screen displays data.
Well, I must say it is more like several minutes before the data is displayed and it isn't effecting large capture files. I'm trying to open 4 MB files and it is sitting for 5 minutes or better before it displays the data. The frame numbers are displayed right away. (lot a good that does) HaHa
Do you know of anyway to improve this? If not, I wouldn't recommend anyone load the 4.7 version until this is fixed. If there is no solution known yet, then I am going to reload 4.6.

Can you help?

DTMan

 

[fortunat]

I guess I'll wait....

Did you download a demo version (I don't even know if it exists yet), or is it the production verison?

Just thought I'd ask the obvious.

Regards

 

[AlfSutherland]

Hi, I can't comment on the time delay when opening capture buffers, probably CPU and memory issues, might be worth looking at your pc "task manager".
For confimation it is definitely a final release, of version v4.70.04, I don't know if they will produce any error fixs. Probably a bit too early for that!!!
Alf

 

[Sniffmaster]

Hi,
I installed 4.7 and it was slow in loading trace files as well as slow in displaying after capture. I uninstalled, cleaned out the registry and reinstalled. Now it runs with no problem. I loaded a 17K file and it displays in 14 sec. This is on Dell laptop 1 gig with 256 mg ram.
There were many bug fixes in 4.7. You want to upgrade...

 

[DTMan]

I've uninstalled the application, cleaned out the registry, and reloaded the Sniffer 4.7 application. It still take 5 - 10 minutes (sometimes longer) to view a trace that is a 16 MB file. It may have a bunch of fixes in it, but if you can't see the data, what good is it? I would like to know what the fix is.

I am running an IBM Thinkpad 600 Mhz with 256 MB ram. 4.5 doesn't take near this long to long a trace. Something is going on with the memory management within the software.

Thoughts?

 

[cpete]

Try disabling expert to see if it is a decode or expert problem. Uncheck the box under "Display Setup"/"Display Initally with"/"Expert Tab". Let me know your results.

Chris

 

[routerpimp]

4.7 + Cisco Aironet 352 card with current firmware rev. 4.7 doesn't like this card. What's the problem? Also, why did NAI take the realtime decode feature our of Sniffer when they bought it from Cinconet/Network General?

-A

 

[cpete]

Why do you care about real time decodes? Explain how you would use them?

Real time decodes were in Cinco's product, but never in Sniffer. The feature was not taken out since it was never there in the first place.

Chris

 

[routerpimp]

Well technically it wasn't in the 'sniffer' product. It was in the Netxray product. Seeing decodes in realtime lets you watch trends as they happen. Yes - I know the graphs show similar information but I also want realtime decode.

Anyway - back to Aironet 352 and Sniffer 4.6/4.7

 

[cpete]

The Aironet 352 is not a supported card. I believe the 340 and 350 are supported. Your suggestion for real time decodes and support for the Aironet 352 card have been forwarded to NAI.

Chris

 

[routerpimp]

Cool thanks.

I have a protocol type that is showing up 'unknown' in my decodes. It's Ethertype 0x8868 and is used by the 3COM NBX system. I believe it's what the NBX uses for voice encapsulation. Any chance Sniffer will get support for that protocol type?

 

[AlexTovar]

Well guys, I installed Sniffer 4.7 on a Compaq Armada E500 with 600 MB hard disk free and 256 MB RAM ( we use this laptop for other demos ) guess what ? 63 MB capture with real time expert and it works fantastic !!! decode is displayed as fast as a 8 MB capture, any problem at all...

 

[cpete]

Cool! 192mb capture buffers are more interesting. 512Mb ram is advised for that configuration.

Chris

 

[ekwlai]

Hi,
I am also interested in the Sniffer Pro 4.7, but I could not find and download the s/w from the mentioned url. Anyone can help? Thanks.

Einar

 

[wybnormal]

You have to get the software from your local NAI Sniffer rep. They stopped posting demo software when too many copies ended up "cracked".

MikeS


Find me at

http://www.packetattack.com

"Take advantage of the enemy's unreadiness, make your way by unexpected routes, and attack unguarded spots."
Sun Tzu

 

[mahaprabhu]

You may be able to download a free 15 or 30 day trial version of a low cost product called NetAsyst, which is a trimmed down version of Portable 4.7