Unsniff news
We just released Unsniff 2.0 Beta. The highlights of this release are remote monitoring via Trisul, more protocol support, and more plugins. Please download the beta and give us feedback via our Forums.
|
| For Admin |
Unsniff can help you troubleshoot like no other tool. Unsniff's stream analysis combined with its powerful scripting abilities enable you to write forensic analysis tools. The following groups will benefit from Unsniff Network Analyzer.
Top features for network administratorsOne-stop statistics
Roll your ownFor a network administrator, the main strength of Unsniff is its extensibility and scripting capabilities. Unsniff provides you the tools to roll your own administration tools. There are plenty of network / protocol analyzers but they do not provide you with an environment to write your own tools. You have to contact their "services department" to get them to include simple functionality. For example : Recently we talked to a talented web network administrator - he wanted his network analyzer to simply print out which countries were hitting what resources on one of his websites. So a simple report of : URL -> list of countries was all he needed. With Unsniff, he was able to write a simple script in Ruby to accomplish this. As a network administrator you will frequently encounter such situations - Unsniff enables you to break free of canned reports and analysis. You can also mine through captured data and perform security analysis.Create your own reportsFor users coming from tools which have many canned reports, it may seem that Unsniff is lacking these reports. The reality is that a majority of those canned reports are hardly ever used and result in information overload. Unsniff can generate many such reports easily via its scripting interface. For example : see packet length distribution, traffic report, and advanced TCP analysis tools.Unleash Networks would love to hear from you about your needs in the reporting area. For more information about how Unsniff Network Analyzer can help with your particular usage scenario, contact us at 
|
Content aware analysis
Unsniff Network Analyzer allows you to view network traffic at various levels of detail across multiple protocol layers.
- End user experience like reconstructed HTML pages, Voice conversations
- High level objects like images, video, Flash, HTML pages, VoIP call legs
- Individual TCP sessions
- Reassembled PDUs (messages that do not respect packet boundaries)
- Finally on to individual packets
Unsniff packs all this functionality in an intuitive and fast graphical interface.
All the above can also be accessed via VBScript or Ruby scripting for offline batch processing.
Distributed analysis with Trisul
Unsniff 2.0 can connect securely to Trisul. This allows you to perform drill down network analysis without having to haul large packet dumps across your network.
