Sniff this!

August 26, 2004

I've occasionally used network sniffers in the past, but with the rise of REST, XML, SOAP and .NET Remoting in the last year, sniffing has become an essential part of my development toolkit. I've evaluated a bunch of network sniffers, including the excellent open-source Ethereal, but the one I keep coming back to is Etherdetect:

Etherdetect isn't free, and it isn't perfect, but it offers the best blend of functionality and ease of use that I've found. Peeking behind the scenes at network traffic has solved some tough performance and debugging problems in our .NET apps. Highly recommended.

One tip: you typically can't sniff traffic going to localhost, at least not without some special workarounds; the loopback TCP/IP stack behaves very differently than the "normal" network paths. Also, you'll need the latest WinPcap libraries installed, particularly if you have a hyperthreading CPU.