Network sniffer

[Roy S. Rapoport]

On Fri, May 30, 2003 at 11:28:43AM -0500, Jim Hickstein wrote:
> analyzer that can, among other things, demultiplex TCP streams and do 
> things like display images that it plucks out of e.g. gzipped tar files in 
> FTP sessions, regardless of TCP port number.  It was actually pretty cool, 
> though it was an early version of the product.
> 
> They have been in touch with me to say it has been updated, and can now 
> handle 200Mbps (it was 10Base-T only back then, IIRC); new pricing, etc.  I 
> said I'd pass along the news.  If you're interested in such things, go look 
> at www.sandstorm.net.

<Kneejerk type="OSS">
Snort
</Kneejerk>

-roy