Ok perhaps I'm missing something here, but I think I like NSSpyGlass best.
IF I have a MAC address set up to watch, I seem to see all activity from the address, but nothing to it.
Any chance you could add a feature to watch an address, or better yet, and option to watch all activity between to address? Thanks for giving us the logging feature, but I was thinking of the program automaticly writting to the log file. Kind of where I could give it a list of address to watch, and it would auto log to a file on each event. Also would be great if I could select where it wrote to. From a security standpoint, I like to be able to install, airsnare in what ever dictory I wanted using whatever name I want, and not have a log file in the same location. For that matter, I just as son not have an ini file with it either. No point in making things easy for the kids. Also this seems like a great program to set up to call another like you did for NSSpyglass. Perhaps I would like to be paged on an event, and have my X-10 light come on.
Also I miss the DHCP feature from NSSpyglass. Where it would show all DHCP request. Perhaps that will be a third program, but for me, I find the DHCP request the most useful of it all. I guess I'm looking for a utility that will let me look into the *Normal* background activity that is always going on, in my network. My guess is I'm more likely to be hit with a trojan or a backdoor, that an unaurthorized machine on my network.
As to the trusted list, any way that it could be modified so that it included a time period, So that Machine 1 was trusted between 8:00 am to 12:01PM but not from 12:02 to 12:58pm and was trusted again from 1:00pm till 6:00pm then untrusted 6:01 pm till 8:00 am? I think that kind of trusting would be way more useful. Where you could say on this day from this point to that point it will be trusted, but not on the weekend, or perhaps on this day.
Great Job!
Grey