Copyright 2004 Sheng Bai1 CommView Report for 60-592 By Sheng Bai

Copyright 2004 Sheng Bai 1

CommViewCommView

Report for 60-592

By

Sheng Bai


Content

Introduction Example Alarm Packet Generator Summary Reference


Introduction

CommView is a program for monitoring Internet and Local Area Network (LAN) activity capable of capturing and analyzing network packets.

CommView is developed by Tamo Soft Inc. It is a commercial packet capture software.

you can download the 30-days free evaluation version from www.tamos.com/products/commview/

It can run any windows95/98/Me/NT/2000/XP/2003 systems.


Main Menus

IP Statistics Packets Logging Rules Alarms


IPStatistics


Packets


Rules


Sample ExperimentSample Experiment

CPU: Intel PentiumIII 1000HZ

Memory: 256MB

OS: Windows2000 Porfessional

IP: 24.57.41.2(cogeco cable)


Setting Rules


Using Web Mail


Result


Advanced ExperimentAdvanced Experiment


Advanced Rules


Advanced Result


AlarmsAlarms


Setting Alarms


Setting Alarms Cont.


Alarm Result


Packet Generator Packet Generator


Generating A Packet


Result


Summary

Friendly Interface, Easy to manipulate Supports of a lot of popular protocols Have some special and useful tools Should use strong cryptography.


Reference

Loris Degioanni, Development of an Architecture for Packet Capture and Network Traffic Analysis, Graduation Thesis, Politecnico Di Torino (Turin, Italy, Mar. 2000)

Horizon, Defeating Sniffers and Intrusion Detection Systems

http://unixgeeks.org/security/newbie//security/sniffer/ http://www.tamos.com/products/commview/ http://winpcap.polito.it/


Questions?Questions?

Documents

Copyright 2004 Sheng Bai1 CommView Report for 60-592 By Sheng Bai