Great tools
- https://www.wireshark.org/
- http://justniffer.sourceforge.net/
- http://netsniff-ng.org/
- http://packeth.sourceforge.net/
Advanced tools
- http://www.ntop.org
- http://www.cacti.net
- https://www.elastic.co/
- https://sourceforge.net/projects/flowviewer/ In combination with flow-tools
Great insight info
About RFC2544 and ethersam
https://en.wikipedia.org/wiki/Y.156sam
Reading material
