Credits

In this Section we would thank people who, directly or indirectly, collaborated to the Analyzer project writing part of the source code.

Main contributors:

• Loris Degioanni, a great contributor particularly on the low-level part of Analyzer (filtering, capturing). The work has been done as part of its graduation thesis at the Politecnico di Torino  
• Paolo Politano, who continued this project. Mainly responsible for bug fixing (release 2.02) and the original monitoring / new statistical module. The work has been done as part of its graduation thesis at the Politecnico di Torino  
• Fulvio Risso, the supervisor, bug-checker, beta tester, programmer....
• Piero Viano, who started this project. The work has been done as part of its graduation thesis at the Politecnico di Torino  

Part of the old source code has been developed, several years ago, by Gaetano Borgione and Cristian Estan.

Here a list of people who collaborated sending us some updates concerning supported protocols:

• Schultz, Dale C.,  [email protected]

• Nelson B. Bolyard,  [email protected]

Special thanks to Microsoft Research, which sponsored this work.

Bibliography

[1] The WinPcap project, Politecnico di Torino. Available at http://www.netgroup.polito.it/WinPcap/.

[2] Bison: GNU Project parser generator; Bison is a parser generator in the style of yacc. It should be upwardly compatible with input files designed for yacc.

[3] Flex: fast lexical analyzer generator; flex is a tool for generating scanners: programs which recognized lexical patterns in text. flex reads the given input files, or its standard input if no file names are given, for a description of a scanner to generate. The description is in the form of pairs of regular expressions and C code, called rules. flex generates as output a C source file, lex.yy.c, which defines a routine yylex(). This file is compiled and linked with the -lfl library to produce an executable. When the executable is run, it analyzes its input for occurrences of the regular expressions. Whenever it finds one, it executes the corresponding C code.

[4] MFC Library Reference

[5] The Protocols.Com web site, a must for anyone that want to decode protocols. Available at http://www.protocols.com

[6] The RFC Sourcebook web site, another must for anyone that want to decode protocols. Available at http://www.networksorcery.com/enp/default.htm