| IM Sniffer Software |
| MSN
Sniffer |
| Monitor MSN messenger conversations on
LAN. |
|
|
|
FAQ for Sniffer Programs: 
|
- Sniffer programs can't capture anything!
- I need to monitor Internet traffic for our whole LAN, but your sniffer program seems capture data from the same computer only. Please help!
- How to configure port mirroring or SPAN to enable monitoring feature for my switch?
- My switch doesn't support monitoring features. What to do?
- Please hide the icon of your sniffer.
- Sniffing localhost?
|
| Q1: |
Sniffer programs can't capture anything! |
| A: |
Make sure you have select a working network adapter if there are more. Please note, you may have to click the "stop" button
to make the "config" button enabled. Don't forget to click the "start to capture" button to let the sniffer begin the capture data. Finally, you can check whether there are some network data to capture.
|
|
| Q2: |
I need to monitor Internet traffic
for our whole LAN, but your sniffer program seems capture
data from the same computer only. Please help! |
| A: |
If you want to capture data from other computers in the same network, your network should be connected by a hub, an ISA Server as Internet gateway, or a swith with port mirroring, SPAN. Unlike hub, common switch prevents promiscuous sniffing.
Fortunately, most decent switch supports "port
mirroring", SPAN, or
similar feature, which allows network administrators
to monitor LAN traffic on any computer connected to
one designated switch port. Please refer to the documentation
that comes with your switch for information on availability
of such feature and configuration instructions. If your
switch doesn't support such feature, please refer to
Q4.
|
|
| Q3: |
How to configure port mirroring or
SPAN to enable monitoring feature for my switch? |
| A: |
Due to a variety of configurations for
different switch products, we don't have a common instructions.
Please refer to the documentation that comes with your
switch for information on availability of such feature
and configuration instructions. You can also ask the
support of the manufacturer of your switch directly.
In addition, we have a 3-step instrution
page on how
to configure SPAN for Cisco switch.
|
|
| Q4: |
My switch doesn't support monitoring
features. What to do? |
| A: |
If you can't or don't want to configure
a management port for your switch, there are still several
alternatives available.
- Execute the sniffer program on your Internet gatesway,
router or proxy server if possible. Any Internet traffic
will pass through the gatesway, therefore sniffer
program could capture them. We recommend ISA Server 2006 or other versions.
- Send some fake ARP packet to your network to cheat
your switch. And then switch will forward traffic
to other computers to your computer. But it is an
inefficient and dangerous way.
- Downgrade your top-level switch to a common hub.
If your Internet bandwidth is less than 5M bps, downgrading
will not have any negative impact on your Internet
access. Please note most Internet bandwidth for home
or company are less than 5M bps. Typical bandwidth
are Dial-up(0.06M bps), DSL/Cable(0.4M bps), and T1(1.5M
bps). Replace top-level switch with a hub as following
diagram.
 |
|
| Q5: |
Please hide the icon of your sniffer. |
| A: |
If we provide hidden feature, antivirus may consider our programs as spyware or virus. In addition, our sniffers are mainly used to monitor the whole network not the same computer. if you need same computer monitoring, you can consider SpyBuddy.
|
|
| Q6: |
Sniffing localhost? |
| A: |
Due to the mechanism of Windows operating
system, a sniffer can't capture local-to-local traffic.
|
|
|
|
Buy a hub now! |
