Q: The program can't find any adapter.
Please help me!
|
| Several customers have complained the sniffer
program can't detect any network adapter on windows 2000 or
windows XP. Now the bug is fixed in WinPcap 3.01 alpha or above.
Please download the latest version of WinPcap at http://winpcap.polito.it/
. |
Q: No ICQ conversations are shown at all,
although there are many ICQ messenger users on the network.
|
| Basically there are two possible reasons. First,
you need to click the start button to let sniffer begin to capture
data. Second, maybe your default network adapter is not a working
one. Click the "config" button to popup a network
adapter selection window. If there are more than one adapters
in it, try them one by one to find out a working one. On window
NT/2000/XP, the working network adapter is shown with name like
"\Device\Packet_{3512...}". While on windows 9X, the
name like "PCNTN4M", etc. Please note, you may have
to click the stop button to make the "config" button
enabled. |
Q: Only ICQ conversations from local computer
are shown, but I need monitor conversations from other computers
on the same LAN, not my own!
|
| Maybe your LAN is connected with a switch. Unlike
hubs, switches prevent promiscuous sniffing. Fortunately, most
modern switches support "port mirroring", "management
port" or similar features to enable network administrators
monitor LAN traffic through one or more designated ports. By
using this feature, you will be able to monitor the entire LAN
segment in switched network envirnoment. Please refer to the
documentation that comes with your switch for information on
availability of such feature and configuration instructions. |
Q: How to configure SPAN or enable port
mirroring for my switch?
|
| Due to a variety of configurations for
different switch products, we don't have a common instructions.
Please refer to the documentation that comes with your switch
for information on availability of such feature and configuration
instructions. You can also search online to find more information
about this.
In addition, there is a 3-step instrution page
on how
to configure SPAN for Cisco switch.
|
Q: Why can't it detect some user names?
|
| If you start the ICQ Sniffer after the user
has logged in, user name may not be available. |
Q: My switch doesn't support monitoring
features. What to do?
|
If you can't or don't want to configure
a management port for your switch, there are still several alternatives
available.
- Execute the sniffer program on your Internet
gatesway, router or proxy server if possible. Any Internet
traffic will pass through the gatesway, therefore sniffer
program could capture them.
- Send some fake ARP packet to your network
to cheat your switch. And then switch will forward traffic
to other computers to your computer. But it is an inefficient
and dangerous way.
- Use a hub, not switch, and connect both monitoring
computer and the ADSL router to the hub. Your existing switch
connects to the hub. This way, all the Internet traffic
will also pass through your monitoring computer.
- Downgrade your switch to a common hub
|
Q: Does your sniffer program work with
DSL or Modem? It locks my dialup Internet connection on windows
2000.
|
| Our sniffer programs support modem on windows9x,
but do't support on windows 2000 or above. But you can run sniffer
on those computers not connecting to Modem directly. Concerning
DSL, if it dials up on itself, and it acts as a router or NAT,
you can run our sniffer programs on any computer on your LAN.
Otherwise, if you dial up on your computer, please don't run
our sniffer programs on the dialup computer, but on other computers.
|
Q: My PC have two CPUs. How can I make
your sniffer work with it?
|
| The packet-capturing driver, WinPcap, need upgrade
to version 3.0 or above. Please download the latest WinPcap
from the official site at http://winpcap.polito.it/
directly. |
