Comparative study of two most popular packet sniffing tools-Tcpdump and Wireshark
Comparative study of two most popular packet sniffing tools-Tcpdump and Wireshark
复制标题
两种最流行的数据包嗅探工具——Tcpdump和Wireshark的对比研究
DOI：
--
复制
发表时间：
2017
期刊：
影响因子：
--
通讯作者：
Anurag Goyal
中科院分区：
文献类型：
--
作者：
P. Goyal;Anurag Goyal
随着互联网及其应用范围的不断扩大，网络、数据传输和数据安全的范围也大大增加。这导致了复杂的工具，虽然在网络缓解方面很有用，但也被网络犯罪分子广泛用于窃听或获得非法访问。本声明适用于网络监控和数据包嗅探工具。虽然它们的设计目的是帮助网络管理员更好地评估服务器，流量和诊断问题，但它们已成为黑客扫描特定网络和嗅探未受保护数据的最佳工具。白色帽黑客使用这些工具来防止犯罪分子的此类攻击，因为他们识别并过滤出恶意数据包及其来源。在本文中，我们彻底比较了两个最广泛使用的开源包嗅探和网络监控工具-Wireshark和Tcpdump。
With the ever expanding sphere of Internet and its applications, the scope of Networking, data transfer and data security too have tremendously increased. This has led to sophisticated tools that are though useful in cyber mitigation but are also widely used by cyber criminals to eavesdrop or gain illegal access. This Statement stands true for Network monitoring and Packet Sniffing tools. Though, they were designed to assist the network administrators in better assessing the servers, traffic and diagnosing the issues but they have become the favorite tool of hackers to scan a particular network and sniff on unprotected data. White Hat hackers use these tools to prevent such attacks by criminals as they identify and filter out malicious packets and their source. In this paper, we have thoroughly compared two of the most widely used open source packet sniffing and network monitoring tools-Wireshark and Tcpdump.