Analyze the data transferred from your PC

SmartSNIFF is a software company NirSoft, specializing in commercial analysis of the system. As all the utilities of this type, it can be seen by your antivirus software as potentially dangerous stuck downloading it and see ... In fact, it's like a knife in a kitchen. This is a very useful tool, but put into the wrong hands and misused, it can endanger your safety. In this case, since you download it and use it at your own purposes, simply to ignore your antivirus software.

You must first install WinPCap on your system (SmartSniff can theoretically analyze traffic without installing WinPCap but under XP like Vista, only incoming traffic is displayed and the TCP traffic is not captured):
- Click> > here <<to download WinPCap
- Install the software following the installation wizard 'all the more trivial it does not offer any setting).

Once this is done, it is possible to install SmartSniff:

- Download the software by clicking>> here << - Unpack the ZIP archive to a folder SmartSniff, for example on the desktop

- The software requires no installation. It runs directly when you double-click the SMSNIFF . The program can therefore be placed on and launched from a USB key.

- Open the menu options and deploy the submenu Display Protocols . The software monitors TCP, UDP or ICMP. In general, we consider most of the time packages TCP . So it is best to uncheck the option UDP and ICMP to prevent the display of unnecessary packets.

- To start capturing packets, go to the menu File and click Start Capture (or click the button [F5] ).

- The software should display a box Capture Options (if this box does not appear, go to the menu options and select Capture Options ). Select WinPcap and the network interface to monitor.

- Now start the communication software you want to monitor Internet / or analyze your web browser.

- All data packets in and out of your computer will be displayed.

- After performing the desired operations, stop the packet capture pressing the [F6] .

- You can quietly analyze what happened. Just click on an event from the list above to see displayed in the lower area of ??the window details of the data exchanged.

- Suppose you wanted to check if a password was transferred unencrypted over the network:
* Click on the list of the top area of the window.
* Press [Ctrl] + [A] to select all events
* Click on the selection of the right mouse button and select HTML Report
* Use the search functions on the page ( [Ctrl] + [F] ) to investigate whether the password is present in the package list.