Description: Watch is a networking debugging tool for use on a Macintosh on Localtalk or directly on Ethernet. There is no documentation for Watch nor is it a supported product. Use it at your own risk. It is freely distributed but Cayman Systems, Inc. still maintains a copyright on it. If you have any
bugs to report, please feel free to send email to support@cayman.com or applelink D0523.
FEATURES:
Allows collection and decoding of network packets from ethernet or localtalk.
AppleTalk and TCP/IP packets are decoded into their components.
Packets can be saved in several forms and recalled later as well as printed.
Basic traffic analysis tools are provided.
Full decoding of AppleTalk and TCP/IP packets is performed.
USING WATCH:
Launch the program.
Select an interface to monitor under the "interfaces" menu. Localtalk is
always present. An Ethernet card which Watch can use will also be present if found on the NuBus. Multiple ethernet cards are supported.
NOTE: Watch closes the AppleTalk and ".ENET" ethernet driver before it
begins. These drivers are *not* reopened when you exit watch. This means if you want to use appletalk you must use the "network" cdev to reselect your network connection or reboot you mac. This is bogus - sorry. It will be fixed in the next release.
Once you have selected an interface, press the "start" button. You should see
packets being collected. When you hit the "stop" button, the collected packets
will be displayed.
You can "expand" the decoding by selecting "Show Detail" and "Dump Hex" under the "Display" menu. Scrolling around will show the next or previous packets.
Packets can be saved or recalled to either a binary or text file. Packets saved to a text file can *not* be recalled.
Decoding:
---------
The decoding of packets currently supports AppleTalk and TCP/IP. The "Display" menu controls what level of detail is displayed.
Files:
------
Packets can be saved and recalled in binary files.
Packets can be recalled from binary files saved with Apple's "Peek" program
Packets can be saved as "text"
Printing:
---------
Packets can be printed to a printer. Note that since the appletalk drivers are closed, you need to do some trickery to print from inside watch. Make sure you stop collection and the use the control panel "network" cdev to select some other network connection and then select back your usual connection. Then, open the chooser, select your printer and print. If you are printing to a local serialprinter (imagewriter) none of this foolishness is required.
Performance:
------------
The basic analysis tools can be used by selecting the "data window" menu item under "performance". Then, the contents of the data window can be selected via the menu.
Packet size, protocols in use and station analysis are provided. These tools are very basic but are helpful.
CARDS SUPPORTED:
localtalk on any macintosh
Apple/3Com Nubus Ethernet card
GatorCard E/II Ethernet card
all Asante Ethernet cards
Known Bugs:
Watch will not work on a Mac IIfx.
The zone list in Chooser disappears after quitting from Watch when using a GatorCard
HISTORY:
1.6.1 Improved decoding of packets
1.5.3
Improved decoding of packets
1.5.1
A bug where dragging the thumb all the way to the bottom in the Detail window, caused the display to disappear and the scrollbar to not function, has been fixed.
1.5
Display filtering - After packets are captured, they can be filtered before displaying on the screen.
Capture filtering - The idea of capture filtering is to selectively pickup packets from the network, in order to cut down unnecessary packets.
NOTE - Leading zeros are required for EtherNet address. Address range and formatwere not validated, therefore, any error in the address will have undetermined results.
Protocol Decoding - AtalkAD decoding, Tunnel packet decoding, and Phase II ZIP decoding.
File Translation - Watch 1.5 can save captured packets in Sniffer format, it can also read a Sniffer saved file after the file was translate by Apple File Exchange.
Multi Window - Summary and Details were in 2 separated windows. Select a packet in the Summary window and open the Detail/Hex window will display the selected packet in decoded form. The display will change if one selected another packet. One can also double click in a packet within the Summary window to open the packet.
Bugs Fixed
- Phase 2 RTMP decode
- Phase 2 ZIP decode
- zone list in Chooser disappeared after quiting from Watch
- sometimes one can not scroll to the first packet or a blank line will scroll to the top of the screen
1.4.3
Bugs Fixed
- Macintosh Plus, SE, & SE/30 crash
1.4.2
added printing and saving as text file
fixed bug reading in peek or watch binary packet files
added delta time to summary line
1.4.1
fixed support for GatorCard E/II
fixed several scrolling bugs
circular buffer is really used now (will collect for ever)
1.4.0
fixed lots of scrolling problems
1.3
basic functionality
supports localtalk and Apple's Ethernet card
THIS NOTIFICATION DESCRIBES THE GOVERNMENT'S RIGHTSIN TECHNICAL DATA AND COMPUTER SOFTWARE PROVIDED WITH THE EQUIPEMENT DELIVERED.
RESTRICTED RIGHTS LEGEND
Use, duplication, or disclosure by the government is subject to restrictions as set forth in subdivision (b)(3)(ii) of the Rights in Technical Data and Computer Software clause at 252.227-7013.
