Path: utzoo!utgpu!watmath!clyde!att!ucbvax!agate!bionet!apple!brooks
From: brooks@Apple.COM (Kevin Brooks)
Newsgroups: comp.protocols.tcp-ip
Subject: Re: Network Monitor
Message-ID: <23751@apple.Apple.COM>
Date: 11 Jan 89 16:51:33 GMT
References: <8901090311.aa25225@SEM.BRL.MIL> <8901091832.AA05477@hp-iag.HP.COM>
Organization: Apple Computer Inc, Cupertino, CA
Lines: 30

In article <8901091832.AA05477@hp-iag.HP.COM> kincl%hp-iag@HP-SDE.SDE.HP.COM (Norman Kincl) writes:
>
>> Last spring two of my co-workers and I conducted and in-depth
>> evaluation of offerings from Cabletron, Network General, Excelan,
>> Hewlett Packard ...
>
>Lots can happen in that time.
>
>>                                                         Also loses when
>> it comes to anything above the link layer.
>
>We have a TCP/IP protocol interpreter that runs on the HP 4972A ( part
>number HP 18221A).  It decodes the level 3 and 4 protocols of TCP,
>DUP, IP, ICMP, ARP and RARP.

This may be a bit misleading, the HP 4972A does not actually decode the tcp/ip
protocol suite rather it displays or I should say tags each field as to what the
code in the field represents not what the code means.  This means that you still
need to decode the protocol stack your self but your saved the time of counting
bytes.  I would not call this protocol decode.  The Excelan product has very 
similar protocol decode features.

I did a fairly extensive evaluation of the HP 4972a, the Network General
Sniffer, FTP's lanwatch, and the Excelan Lanalyzer.  If anyone is interested 
in seeing a copy of my report send me email and I'll send you a copy.
Kevin Brooks
A/UX Specialist, Apple Computer		   APPLELINK: BROOKS3
UUCP: {mtxinu,sun,nsc,voder}!apple!brooks  DOMAIN: brooks@apple.apple.com
CSNET: brooks@apple.CSNET 		   ARPA: brooks%apple@csnet-relay.ARPA