The use of sniffer cutting tool

Installation of Sniffer software

sniffer requires an XP or WIN2003 environment to function properly, and without both systems, you can install the virtual machine and use sniffer on the virtual machine. If you do not have these two systems will be unable to find the network card or can not open the situation. In this case, the installation of sniffer will not be an exception, you can also download the Chinese version. One thing to note is that the installation is complete and restarted immediately.

• The first feature----the use of the dashboard instrument panel

Open sniffer, select the network card will appear after the interface shown in 1. The first table in the figure shows the network usage (utilization), the second table shows the number of packets per second that the network passes through (Packets), and the third table shows the error rate per second (Errors) for the network. Where the red area is the alert area, if we find that there is a pointer to the red area we should pay attention to, indicating that the network line is not good or the network use pressure load is too large. Using these three tables, you can visually observe the usage of the network, and the Red section shows the upper limit set according to the network requirements.

Figure 1

• the second function----the use of the host key

Click on the host key to display the interface in. Then click on the IP option. The interface is all the online host address and the external network server address. Click on the "Details" icon shown in the figure, which shows the distribution of the protocol across the network, and clearly indicates which machine is running those protocols. Click "Bar", show the entire network of machines used in the first 10 of the bandwidth of the case, the display is a histogram, click on the "pie chart", the way is the pie chart.

Figure 2

• application of the third function----matrix

Click on the graph matrix, there is a network connection, the Green Line in the figure represents the network connection that is occurring, the blue line represents the connection that occurred in the past. You can see the connection by placing your mouse over the line. Many people use him to find the virus, in fact, using him to assess the network conditions and abnormal traffic, is a very useful tool. To see which host has the highest number of connections, right-click on the popup menu to enlarge the image. Find the most connected machines, select, press the right mouse button, select the Display selection node, you can view a specific point-to-multipoint network connection.

Figure 3

Grab all the packets from a machine

This example is to catch 10.1.1.12 all the packets of this machine, 4 Select this machine. Click on the Left Capture icon, 5 interface, wait until the Figure 5 telescope icon Red, indicating that the data has been captured, click on the icon, select the decoding option to see all the captured package.

Figure 4

Figure 5

Crawl Mailbox Password Account

Select the definition filter in the Capture menu, the Figure 6 interface appears, select the address entry in Figure 6, select IP in the address type, position 1 fill in IP for 10.1.1.11 position 2 fill in any. Select the Advanced option, select Ip/tcp/http Click OK to complete the setup.

Figure 6

Figure 7

• Grab Bag

Click the Start button to start the Capture package 8, login 163 mailbox, wait until the telescope icon red, indicating that the data has been captured, click on the icon appears in Figure 10 interface, select the decoding option to see the captured all the package mailbox account and password on the inside, click on the display, Find frame Look in dialog box enter keywords Password11 Click OK to find the email account password 12 in the lower right corner of our class 163 email account and password.

Figure 8

• Login Mailbox

Figure 9

• To package analysis

Figure 10

• Find password for account

Figure 11

Figure 12

This site article is for baby bus SD. Team Original, reproduced must be clearly noted: (the author's official website: Baby bus )

Reprinted from "Baby bus Superdo Team" original link: http://www.cnblogs.com/superdo/p/4719314.html

The use of sniffer cutting tool