Existing users, 
Interesting application, the traffic map is especially cool. However, I think I'll stick with Ethereal in X11. While the interface may be harder to use, it supports a lot more stuff.
For those of you who haven't tried FrameSeer yet, I suggest you do, if only to look at the map.
BTW, you should put it in the documentation that the demo version stops capturing after 20 packets. Also, you shouldn't do SetUID root on the application by default - make that a preference. I don't really trust applications that SetUID themselves root. I'd rather authenticate each time I start up the application.
FrameSeer
packet capture, decoding & analysis utility
Version: 1.8
Interesting
Feedback Type: Review
Contributed by: Eridius Sunday, December 07 2003 @ 07:12 PM PST
Product Platform: MacOSX
Used Product For: Have Not Tried
Recommend Product: YES
Overall Rating:
Ease of Use:
Support:
Features:
Quality / Stability:
Price:
Only helper is SetUID - LGOSystems
Apple's security guidelines recommend not giving SetUID privileges to entire applications but, instead restricting SetUID to small standalone helper applications. FrameSeer follows those guidelines. FrameSeer itself does *not* have SetUID privileges. Only two small helper tools within the package have SetUID privileges. One tool launches tcpdump for FrameSeer - the tool needs SetUID so that it can launch tcpdump to capture packets. The other tool, which is only present in the commercial version, manipulates global preferences so that one licence will work for all users on the computer. Both tools can only be called by FrameSeer. The helper tools do not ship with SetUID set. Permission must be granted by the administrator of each machine on which the package is installed. Permission can be revoked at any time via the FrameSeer>Security Privileges menu.Reply to This
Sunday, February 15 2004 @ 01:43 PM PST