About Network Analyzers
Network analyzers, also called protocol analyzers, packet analyzers, LAN/WAN analyzers, network sniffers and packet sniffers, are devices used to specifically monitor, decode and analyze computer network traffic.
Specifically, network analyzers decode network protocol headers and trailers in order to understand the data inside the packet "encapsulated" by a network protocol. A key function is to decode the protocol used at each OSI layer in order to identify network problems. Some network protocol analyzers can reconstruct lower-level TCP/IP packets into higher-level application layer messages to help understand the network traffic.
There are two main types of network analyzers - portable and distributed. Portable network analyzers are commonly used by field engineers and inserted into the network where needed. Distributed network analyzers consist of several monitoring "probes" inserted into various parts of the network and console software installed in a Network Operations Center (NOC) to monitor the probes from a central location.
Unauthorized network analyzers used by hackers are a problem as they are almost impossible to detect and be be inserted into a network anywhere.
Leading vendors of network analyzers include Fluke Networks, Agilent, Wildpackets, Javvin, Network General and Netscout. A popular open-source software version of a network analyzer is Ethereal.
|