Q: The program can't find any adapter. Please help
me!
|
| Several customers have complained the sniffer program
can't detect any network adapter on windows 2000 or windows
XP. Now the bug is fixed in WinPcap 3.01 alpha or above.
Please download the latest version of WinPcap at http://winpcap.polito.it/
. |
Q: No MSN conversations are shown at all, although
there are many MSN messenger users on the network.
|
| Basically there are two possible reasons. First, you
need to click the start button to let sniffer begin to
capture data. Second, maybe your default network adapter
is not a working one. Click the "config" button
to popup a network adapter selection window. If there
are more than one adapters in it, try them one by one
to find out a working one. On window NT/2000/XP, the working
network adapter is shown with name like "\Device\Packet_{3512...}".
While on windows 9X, the name like "PCNTN4M",
etc. Please note, you may have to click the stop button
to make the "config" button enabled. |
Q: Only MSN conversations from local computer are
shown, but I need monitor conversations from other computers
on the same LAN, not my own!
|
| Maybe your LAN is connected with a switch. Unlike hubs,
switches prevent promiscuous sniffing. Fortunately, most
modern switches support "port mirroring", "management
port" or similar features to enable network administrators
monitor LAN traffic through one or more designated ports.
By using this feature, you will able to monitor the entire
LAN segment in switched network envirnoment. Please refer
to the documentation that comes with your switch for information
on availability of such feature and configuration instructions. |
Q: How to configure SPAN or enable port mirroring
for my switch?
|
| Due to a variety of configurations for different switch
products, we don't have a common instructions. Please
refer to the documentation that comes with your switch
for information on availability of such feature and configuration
instructions. You can also search online to find more
information about this.
In addition, we have a 3-step instrution page on how
to configure SPAN for Cisco switch.
|
Q: Why there are email only and no user name in some
msn conversations?
|
| If you start the MSN Sniffer after a conversation
begin, some information may not be available. |
Q: My switch doesn't support monitoring features.
What to do?
|
If you can't or don't want to configure a management
port for your switch, there are still several alternatives
available.
- Execute the sniffer program on your Internet gatesway,
router or proxy server if possible. Any Internet traffic
will pass through the gatesway, therefore sniffer
program could capture them.
- Send some fake ARP packet to your network to cheat
your switch. And then switch will forward traffic
to other computers to your computer. But it is an
inefficient and dangerous way.
- Use a hub, not switch, and connect both monitoring
computer and the ADSL router to the hub. Your existing
switch connects to the hub. This way, all the Internet
traffic will also pass through your monitoring computer.
- Downgrade your switch to a common hub
|
Q: Does your sniffer program work with DSL or Modem?
It locks my dialup Internet connection on windows 2000.
|
| Our sniffer programs support modem on windows9x, but
do't support on windows 2000 or above. But you can run
sniffer on those computers not connecting to Modem directly.
Concerning DSL, if it dials up on itself, and it acts
as a router or NAT, you can run our sniffer programs on
any computer on your LAN. Otherwise, if you dial up on
your computer, please don't run our sniffer programs on
the dialup computer, but on other computers. |
Q: My PC have two CPUs. How can I make your sniffer
work with it?
|
| The packet-capturing driver, WinPcap, need upgrade
to version 3.0 or above. Please download the latest WinPcap
from the official site at http://winpcap.polito.it/
directly. |
| Q: Sniffing localhost? |
| Due to the mechanism of Windows operating system, a
sniffer can't capture local-to-local traffic. |
