You need to look at McAfee's web site for the specific virus. If there's a Sniffer filter available there will be a link to it in there. There is no master filter posted on Sniffer.com.
Use the autodiscovery feature of the address book within Sniffer. You can either enter a range of IPs which will ping the selected range, or select any IP address on the network which will sit there and listen to traffic to correlate Netbios names with IP and MAC addresses.
Savage
Mikes999,
Check out the new Sniffer Investigator at www.sniffer.com. For the money it is an outstanding portable analysis tool that comes pre-configured on it's own dedicated laptop.
J.R.S.
The only desktop (PCI) NIC supported by Sniffer is the Adaptec ANA-6911A. This is the only PCI NIC that that works in conjunction with the NAI enhanced drivers that allow you to see packets damaged at layers 1 and 2 of the OSI model
There is no "real time" display when capturing with sniffer basic. Sniffer pro will give you real time expert analysis when capturing but you still have to stop the capture to view the packets.
JR Savage
Sniffer SE
Dallas TX
Check that Sniffer is not in loopback mode. Also do a capture while generating traffic to verify that you are actually doing so.
JR Savage
Sniffer SE
Dallas TX
WYB,
I agree with your example. I've seen quite a bit of crummy programming myself.
Another thing to bear in mind is that "symptoms" in themselves are relatively minor issues which may or may not indicate a larger problem. That's why you may see large numbers of a particular symptom...
Below is the actual sniffer expert explain of the error
Window Frozen
In a windowing protocol (such as DECnet or TCP), the window size of this station has been stuck at some number of bytes for longer than the Window Frozen Time threshold.
When a window is stuck, data flow will not be as...
C152,
Set up test scenario to capture data to and from the citrix server. Set a capture filter with the server IP address to "any" then start a capture and run the applications that will be communicating with the server. Stop and view the capture and find the source and destination...
Dreamer1,
Do you have IP connectivity between the console and server? Are you trying to access it through a firewall? Is there an ACL on the router preventing you from connecting?
JRSavage
Sniffer SE
Dallas
I disagree wholeheartedly with DCohn...Sorry. This is EXACTLY why you would want a Sniffer. As Mr Fanelli so eloquently pointed out, Sniffer will not only give you real-time bandwidth stats but also who's using it. I have personally used it many times for this specific purpose and twice found...
LivingXL,
Sniffer does not decrypt application data from within packets, only protocol information. If there is raw ASCII text within the packets you'll see it, otherwise you won't.
John R Savage
Sniffer SE
Dallas TX
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.