Free ethereal packet sniffer software for mac

MacSniffer is a front end to the built-in tcpdump packet sniffer on Mac OS X. MacSniffer allows you to view all of the traffic on a network connection, such as ethernet.

MacSniffer includes a filter editing interface and a filter library to easily construct and reuse packet filters to view a subset of all the traffic on the connection, such as just that destined for a specific host or port.

You can choose the level of detail you want captured, from just the minimal packet headers (showing source and destination hosts and ports) up to a full hex and ASCII dump of the packet contents.

MacSniffer can be useful for diagnosing many network problems, debugging client/server programs, and scanning for particular network exploits in real time.

Ethernal is a simple tool for visualizing all incoming and outgoing Ethernet packets. The source code of the application is available.
I wanted to learn how to read raw Ethernet packets on MacOS X. After going through several examples, I ended up writing this little piece of software. It uses the Berkeley Packet Filter device to read all incoming and outgoing Ethernet packets. I have wrapped the whole thing in a Cocoa GUI using the new bindings features of Mac OS 10.3.
Main features:
- Reads all incoming/outgoing Ethernet packets
- Displays the packet content in hexadecimal/ascii
- Finds any string in packet
- Filters packets
- Dynamic display width
- Save/load packets to disk.

Requirements: Mac OS X 10.4 or later.

Requirements:
MacOS X 10.0 or later.

Justniffer captures TCP packets, reassembles and reorders them, performs IP packet defragmentation and displays the tcp flow in the standard output.
Justniffer is useful for logging network traffic in a standard (web server like) or in a customized way.
Justniffer can log timings, for example it can log the response time). It is very useful for tracking network services performances (e.g. application server, web server, etc.).
The main differences with other sniffers are:
- Justniffer captures tcp/ip traffic and handle all tcp/ip stuff (reordering, retrasmissions, defragmentation). The tcp flow adjustment is performed using linux kernel code included in a slightly modified version of the nids library.
- Justniffer reports timing informations. So it can be usefull for tracking network system performances

Enhancements
- fixed compilation issues with gcc 3.3.3
- added connection.timestamp
- fixed idle.time.0 formatting
- fixed documentation
- more adherence to RFC 2616: looking for headers in case insesitive mode
- new HTTP headers added

Switzerland is a tool for testing networks, ISPs and firewalls developed by the Electronic Frontier Foundation (www.eff.org).
Switzerland will spot IP packets which are forged or modified between clients, inform you, and give you copies of the modified packets.

Enhancements
Lots of bugfixes and some new features:
- Make the messages that Switzerland gives users less cryptic and more informative! Especially
- Improve on the notification of modified/forged packets in versions 0.0.x. In the case of modifications, provide specific reports of which packet fields have been modified, from what and to what. In the case of injections/forgeries, provide tcpdump-style representations of the packets.
- Include a new command line tool, study-switzerland-pcaps, to perform the above analysis based on the -in and -out pcap modification/forgery logs produced by Switzerland. This will be useful both for old logfiles from 0.0.7 and for newly created logs.
- Reduce the incidence and duration of the "you cant connect, because we already have a connection from your IP" problem.
- Fix several internal bugs in the server, which 0.0.7 "handled" by catching exceptions and trying to ignore them.
- When modified/forged packets are observed, dont tell other parties what your NIC and routers MAC addresses are
Internal improvements and adjustments:
Refactor things out of Switzerland.py:
- Matchmaking is now separated and easier to understand
- Forgery context operations are now part of SwitzerlandLink.py
- There are some minor but incompatible changes to the wire protocol, in which reports on forgeries are passed around with the fo-context and forged-details messages.
- We have some traceroute collection infrastructure now, although were not using it yet

goSerial is an application that lets you talk to serial devices.
This type of application is often refered to as a terminal, because it mimics the behaviour of the terminal hardware that was used to communicate with servers and mainframes in the old days.
While only few people need to talk to server machines through serial cables today, there are a lot of other devices that use some sort of serial connection:
Modems
Routers
Cell Phones
Communications Equipment (e.g. Packet Radio)
Industrial or Medical Equipment
Although most new Macs come without an old style serial port, many of them feature an internal modem that acts as a serial device.
You can also get serial adapters for the USB port or PCI cards with serial ports and use those to talk to external serial hardware.
Enhancements:
- build as a Universal Binary
- time limit removed.