pocketsoap : Message: Interim build of YATT

YATT aka Yet Another Trace Tool

YATT is planned to be the replacement for all the current tracing
tools, it has a GUI similar to TcpTrace, but has pluggable trace
providers, that are selected via the GUI.

The GUI has been re-written in WTL, and fixes many of the issues i had
with the previous GUI's. This interim build contains a hex viewer, but
no disk logging yet.
There are two providers, one based on WinPCap [to replace pcapTrace]
and one based on W2K raw sockets, both sniff traffic from the network,
so don't need any code changes, but won't work with localhost traffic.

You can download the installer from
www.pocketsoap.com/yatt/yatti.exe

Comments, bug reports, feature requests etc welcome
Cheers
Simon
www.pocketsoap.com

Expand Messages

Author

Sort by Date

YATT aka Yet Another Trace Tool YATT is planned to be the replacement for all the current tracing tools, it has a GUI similar to TcpTrace, but has pluggable...

Simon Fell
simonfell99

Nov 28, 2001
6:51 am

Cool, Simon! Do you expect to get the providers working on localhost soon? Very keen on YATT :-) Christian ... ...

Christian Weyer
cweyer74

Nov 28, 2001
9:41 pm

localhost capture is easily the most popular request I get. Neither winpcap or the w2k raw sockets stuff will do it, as they both appear to layer the physical...

Simon Fell
simonfell99

Nov 28, 2001
10:06 pm

I know that YATT is in very early stage and doesn't include a help file yet ;-) But what do the 'Name Filter' and 'Port Filter' settings mean. They seems to...

Christian Weyer
cweyer74

Nov 28, 2001
10:32 pm

... Hmmm, that can't be right ! Basically for both the current providers, if you leave name filter & port filter blank, they will capture and show all traffic....

Simon Fell
simonfell99

Nov 28, 2001
10:56 pm

Thanks for that brief explanation. But when I set both fields to empty I will receive the following error: Error WSAIoctl(SIO_RCVALL) = 10022 Christian...

Christian Weyer
cweyer74

Nov 28, 2001
11:07 pm

That's with the raw sockets provider, right ? but if you put values in it doesn't error ? Have you tried the winpcap provider ? Cheers Simon...

Simon Fell
simonfell99

Nov 29, 2001
12:38 am

Using Raw sockets: leaving the fields blank -> ERROR maessage filling the fields -> NO ERROR And after several starts the Raw Socket option fields really ...

Christian Weyer
cweyer74

Nov 29, 2001
10:05 am

Hm ... sorry Simon. I cannot seem to get YATT running. My parameters for Raw Sockets: Capture IP: 10.0.0.76 Name Filter: yahoo.com Port Filter 80 (or empty,...

Christian Weyer
cweyer74

Nov 29, 2001
11:02 am

I found a bug in the raw sockets provider last night, it might be the problem you're running into. You'll need to install winpcap 2.3 beta for the winpcap...

Simon Fell
simonfell99

Nov 29, 2001
5:26 pm

I already told you: I am very keen on this. So where is the update? ;-))) Christian...

Christian Weyer
cweyer74

Nov 29, 2001
6:48 pm

http://www.pocketsoap.com/yatt/yatt_336.exe Cheers Simon...

Simon Fell
simonfell99

Nov 29, 2001
7:40 pm

Still no luck ... When this version starts up it still defaults to the DNS server's name and this time port 80 when selecting Raw Sockets. When I say...

Christian Weyer
cweyer74

Nov 29, 2001
11:35 pm

... Hmmm, I'll have to get an XP box setup. ... Don't know, those strings come straight from the winpcap API, I'll see if there are any better display names...

Simon Fell
simonfell99

Nov 30, 2001
12:49 am

Simon, I have the following three entries for winpcap (BTW, the tab sheet on the config windows states 'Raw Sockets Tracer' ;-)_ -...

Christian Weyer
cweyer74

Nov 30, 2001
10:30 am

Yahoo! Groups

Group Information

Yahoo! Groups Tips

Did you know...

Messages