Sniffer Pro v4.7 has been released - Network General: Sniffer (2024)

Alf,

I have downloaded and tested this version.Some of the things that I have experienced are pretty aggravating.Listed in the known problems section is the following statement.
When opening large capture files, the Decode tab (on the Expert window) may appear blank for several seconds (30-45 seconds) before the screen displays data.
Well, I must say it is more like several minutes before the data is displayed and it isn't effecting large capture files.I'm trying to open 4 MB files and it is sitting for 5 minutes or better before it displays the data.The frame numbers are displayed right away. (lot a good that does) HaHa
Do you know of anyway to improve this?If not, I wouldn't recommend anyone load the 4.7 version until this is fixed.If there is no solution known yet, then I am going to reload 4.6.

Can you help?

DTMan

I guess I'll wait....

Did you download a demo version (I don't even know if it exists yet), or is it the production verison?

Just thought I'd ask the obvious.

Regards

I've uninstalled the application, cleaned out the registry, and reloaded the Sniffer 4.7 application.It still take 5 - 10 minutes (sometimes longer) to view a trace that is a 16 MB file.It may have a bunch of fixes in it, but if you can't see the data, what good is it?I would like to know what the fix is.

I am running an IBM Thinkpad 600 Mhz with 256 MB ram.4.5 doesn't take near this long to long a trace.Something is going on with the memory management within the software.

Thoughts?

Try disabling expert to see if it is a decode or expert problem.Uncheck the box under "Display Setup"/"Display Initally with"/"Expert Tab".Let me know your results.

Chris

4.7 + Cisco Aironet 352 card with current firmware rev.4.7 doesn't like this card.What's the problem?Also, why did NAI take the realtime decode feature our of Sniffer when they bought it from Cinconet/Network General?

-A

Why do you care about real time decodes?Explain how you would use them?

Real time decodes were in Cinco's product, but never in Sniffer.The feature was not taken out since it was never there in the first place.

Chris

Well technically it wasn't in the 'sniffer' product.It was in the Netxray product.Seeing decodes in realtime lets you watch trends as they happen.Yes - I know the graphs show similar information but I also want realtime decode.

Anyway - back to Aironet 352 and Sniffer 4.6/4.7

The Aironet 352 is not a supported card.I believe the 340 and 350 are supported.Your suggestion for real time decodes and support for the Aironet 352 card have been forwarded to NAI.

Chris

Cool thanks.

I have a protocol type that is showing up 'unknown' in my decodes.It's Ethertype 0x8868 and is used by the 3COM NBX system.I believe it's what the NBX uses for voice encapsulation.Any chance Sniffer will get support for that protocol type?

Cool!192mb capture buffers are more interesting.512Mb ram is advised for that configuration.

Chris

Hi,
I am also interested in the Sniffer Pro 4.7, but I could not find and download the s/w from the mentioned url. Anyone can help? Thanks.

Einar

You have to get the software from your local NAI Sniffer rep. They stopped posting demo software when too many copies ended up "cracked".

MikeS