WINCHAT sniff and no see words 1

[LivingXL]

Good Day all....
I'm attempting to sniff a user in our company who management thinks is using WINCHAT.EXE to communicate to other users. This user is sending nasty messages to other users and management wants to catch it in order to prosecute this person.
However, when I sniff (spanning a port on the switch)all I get is jumbled information.
Is WIN2K using some sort of algorythm that sniffer doesn't know?
Just curious and thanks for your time..
Mike

 

[jrsavage]

LivingXL,

Sniffer does not decrypt application data from within packets, only protocol information. If there is raw ASCII text within the packets you'll see it, otherwise you won't.

John R Savage
Sniffer SE
Dallas TX