[ILUG] Reading TCP data packet contents

[Niall O Broin]

On 14 Dec 2005, at 14:22, conor at discuskeeping.com wrote:

> Quoting Thomas Bridge <thomasb at gmail.com>:
>
>> On 12/14/05, Ronan O Ciosoig <ronanoc at mac.com> wrote:
>>> Hi,
>>> I am trying to investigate the TCP transactions of a certain app on 
>>> Mac OS X. I know you can use tcpdump to dump the packets, and use 
>>> Ethereal or tcpshow to read the data, but neither of these are 
>>> available on OS X. Any suggestions on how I sould go about it or 
>>> apps I should use.
>>
>> I find it hard to believe that the Mac doesn't support those
>> applications

I find it hard to believe that the OP did any research - tcpdump is 
supplied as standard with OS-X, at least on 10.3 and 10.4 - I have no 
earlier versions handy.

> MACOSX does have these apps, you need to use "port" to compile em 
> (yes, as bad as "that" distro :-0
>
> But yes I agree, this is not the mac list.
> Try darwinports
> HINT: port install ethereal

Or install fink, and then

apt-get install ethereal


Niall