Comprehensive application of Sniffer in Internet cafe network maintenance

Sniffer is a powerful protocol analysis software launched by NAI, it can capture network traffic for detailed analysis, monitor network activities in real time, use expert analysis system to diagnose problems, and collect Network Utilization and errors. Sniffer Pro 4.6 can run on a variety of Windows platforms, as long as it is installed on any machine on the network, you can monitor the entire network. The following uses the Sniffer 4.70 Chinese version as an example to describe the specific application of Snffer in Internet cafe network maintenance.

1. Install Sniffer Software

After downloading the Sniffer software on the internet, run the installation program directly. The system will prompt you to enter your personal information and software registration code. After the installation is complete, restart the software and install the Sniffer Chinese patch. After the Sniffer program is run, the system will automatically search for the network adapter in the machine and click OK to go To the Sniffer main interface.

Ii. Use of Sniffer Software

When the Sniffer software is enabled, the main interface 1 is displayed. The current running status of some machine lists and Sniffer software is displayed. The software menu is displayed, and some shortcut menu is provided below, there is a row of shortcut buttons on the left. The Chinese version of the software is used, so the Chinese version of some words is not too accurate.

1. Obtain the machine list in the Network

After the Sniffer software runs, you must first search for machines on the network. Find and run the address book option in the tool menu. In the tool menu on the left side of the address book, you can find a magnifier icon, this is the "auto search" button. After the "Automatic Search" function is run, enter the start IP address and end address of the network in the IP address segment, and then the system will automatically search for the network. After the search is complete, a machine list of 1 is displayed.

2. Save the machine list

After Sniffer searches for all the machine lists on the network, you can select the "Save Address Book" option in the "Database" menu to save the current machine list for future use. Because Sniffer's address book stores information such as the IP address of the client in the network and the MAC address of the NIC, if the client in the network has changed the NIC, you must re-search the machine list and re-Save the address book. If no new machine is added in the network, you do not need to update the address book.

　Iii. Sniffer menu and function Introduction

When Sniffer enters, you need to set the NIC information of the current machine. After entering the Sniffer software, the interface 2 appears. You can see the Chinese menu of the Sniffer software. Below are some commonly used tool buttons. In routine network maintenance, you can use these tools and buttons to solve the problem.

1. Host list button: after saving the machine list, click this button. Sniffer will display information about all machines in the network. 1) where, the Hw address column is the client information in the network. Generally, clients in the network have a unique name. Therefore, you can see the name of the client in the Hw address bar. For machines with Sniffer installed, use "local" in the Hw address bar. For network devices such as switches and routers in the network, Sniffer can only display the MAC addresses of these network devices.

Inbound and outbound data packets refer to the number of data packets sent and received by the client, followed by the size of bytes sent and received by the client. You can view the data traffic in the network accordingly.

2. Matrix button: The Matrix Function uses a circular legend to describe the data trend of the client. You can see that there is a data exchange machine with the client. When using this function, select the client and click this button.

3. Request Response Time Button: The request response time function allows you to view detailed information about the client's Website access. When a client accesses a site, you can use this function to view information such as the time when the client sends a request to the server for response.

4. Alarm log button: When Sniffer detects abnormal network conditions, it will automatically record it in the alarm log. After enabling the Sniffer software, you must first check the alarm log to see if the network is running normally.

Iv. Application of Sniffer in network maintenance-solving network transmission quality problems

Sniffer's Application in Internet cafes mainly uses its traffic analysis and viewing functions to solve network transmission quality problems in Internet cafes.

1. broadcast storm: broadcast storm is the most common network fault in Internet cafes. The emergence of a network broadcast storm is generally caused by a client being attacked by viruses, network equipment damage, and other faults. You can use the host list function in Sniffer to view which machines in the network have the highest traffic. The matrix shows which machines have abnormal data traffic. Therefore, you can determine the specific fault point of the network in the shortest time.

2. Network Attacks: With the continuous development of the network, hacking technology has attracted many network enthusiasts. As a result, some novice hackers started to experiment with Internet cafes. DDoS attacks became a means for some hackers to show off their own technologies. Due to the large data traffic of Internet cafes and external DDoS attacks, internet cafes may be interrupted for a short period of time. For similar attacks, the use of Sniffer software can effectively determine whether the network is affected by a broadcast storm or from external attacks.

3. network hardware fault detection: If a hardware device that works in the network is damaged, the data traffic will be abnormal. Using Sniffer, you can easily identify physically damaged network hardware devices.