RE: [Ethereal-users] Disguised Ethereal?

["Simon Hailstone" <Simon.Hailstone@xxxxxxxxxxxxxxxxxxx>]

> This product looks suspiciously like ethereal with a
> modfied UI.  Does anyone here know anything about it?
>
>http://www.etherdetect.com/features.htm



I just downloaded the demo version and had a quick look.
I think it is not derived from Ethereal.  It is using
WinPCAP though.

The executable is <600kB in size, and has a very limited
set of features.  I don't think it can dissect anywhere
near the number of protocols that Ethereal can, the
filters appear quite primitive, and none of the
statistic / analysis functions of Ethereal are present.

It does have one redeeming feature, in that the
"conversation" view works very well.

( I also like the way it uses little green lamps
  to represent TCP flags! )


Best Regards,

Simon Hailstone
Orthogon Systems