Posted: Wed Jul 09, 2003 2:17 pm Post subject: Cannot understand the packets output
Hi Guys,
The product captured packets, localhost anyway, how do I configure it such that everybody on my LAN can be captured?
Even my own system that was captured, I was able to save the captured packets, and I was able to open it, but I did not understand any bit of the contents, they are just 0s, 1s, hexadecimal xters, and collection of other characters.
I want to be able to read in plain english what transpired between every workstation and the outside world on the net.
Most importantly, my objective is to confirm a staff who has been suspected to be revealing business information using yahoo chat or other chatting facilities to communicate sensitive business information to competitors.
Kindly assist.
Can this software do it or any other one? I want to be able to capture and even print chat conversations between my LAN-based workstations and the outside world. IP address by IP address.
You have to configure a management port on your switch in order to capture network traffic from other PCs. The EtherDetect could capture original network packets and show them with conversations. But if packets themselves are encoded such as some chat content, you will see just collection of hex and other characters.
I recommend you use some spyware to monitor your staffs. But first of all, you have to install these spyware on your staff's PC. Then, it will be hiden completely from being detected, and send you information periodically.
Posted: Thu Jul 10, 2003 1:20 am Post subject: How do I configure Management Port on Switch/Hub?
Thanks Harry,
I will try the spy software. But how can one setup management port on a switch/hub? We have the following equipment cascaded: 3Com super stack II Dual speed Hub 500, 3Com Super stack II Switch 100, and 3com Super stack II Entry Hub.
How can I configure management port on these incase the spy software doesn't work as required?
We don't have the switch you mentioned. But you can consult your network administrator or the switch manufacturer. In most case, it is very easy to configure.
When you are using spyware, you needn't configure a management port for your switch. Because you have to install the spyware on the target PC.
Contrasted to spyware, sniffer don't require you install any additional software on target PC, but switch supporting management port is a must. _________________ Harry Liu
MCSD, Security Specialist
EffeTech, Inc.
Sniffer, Packet Sniffer & MSN Monitor
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum