Some of these file formats include Cisco Secure IDS iplog and Microsoft Network Monitor. One of the features is providing users with an excellent platform for reading or writing in many different capture file formats. Wireshark also offers a rich feature set that makes it be an effective network protocol analyser. Wireshark gives enterprises professional and customisable reports which are fully integrated with Wireshark. With Wireshark, enterprises can quickly access every large pcap files, use advanced triggers and alerts, troubleshoot problems faster, quickly identifying the applications running in the network, and monitoring virtual machine traffic. Wireshark lets users see what's happening in their network at a microscopic level often used across many government agencies, non-profit enterprises, and educational institutions. Wireshark is backed up by volunteer contributors of networking experts. UnixArena’s Snoop guide will help you to setup the snoop between two IP’s.Īssume you have collected the snoop output.How do you analysis it ? You can use snoop command it self to read the snoop logs.But its not user friendly.I would recommend you to use wireshark to analysis snoop output from your laptop/Desktop.Here we will see how to analysis snoop data using wireshark.ġ.Download wireshark and install it in your laptop.Wireshark is remote monitoring and management software that's mostly used as a network protocol analyser. Most of the network issues are intermediate and you never know when it will happen again.So you need to capture complete network activity to find the issues.In Solaris we have an inbuilt tool called snoop which will capture the real network traffic and save it in file.

You never know where the problem resides on network issues since many hardwares involved like NIC,switch,cables, routers and firewalls. Network troubleshooting is most difficult part in Unix Administration.To get resolve these network issues ,you need good support from network team.

Wireshark log analysis