Ethereal is a graphical sniffer, available for both UNIX (Gtk)
and Windows. Ethereal's SMB support is quite good. For details on the use of
ethereal
, read
the well-written Ethereal User Guide.
Listen for data on ports 137, 138, 139, and 445. For example, use the filter
port 137, port 138,
port 139, or port 445
as seen in
Starting a Capture snapshot.
A console version of ethereal is available as well and is called
tethereal
.
|