| Aldebaran is an advanced libpcap-based network TCP sniffer. It gives a user
only a payload from captured data and basic info about addresses and ports
(nothing about flags, etc.). This is useful for monitoring data sent by
connections and sniffing passwords. It supports filtering packets with not
only simple port/address libpcap rules but also payload contents and can
send captured data to another host via UDP. It can also encrypt data
written to a dump file, analyse interface traffic, and present statistics
(packet count, sizes, average speed, etc.) in HTML or a plain text file. |