Comm View Report for 60 592 By Sheng

Comm. View Report for 60 -592 By Sheng Bai Copyright 2004 Sheng Bai 1

Content Introduction Example Alarm Packet Generator Summary Reference Copyright 2004 Sheng Bai 2

Introduction Comm. View is a program for monitoring Internet and Local Area Network (LAN) activity capable of capturi ng and analyzing network packets. Comm. View is developed by Tamo Soft Inc. It is a co mmercial packet capture software. you can download the 30 -days free evaluation versi on from www. tamos. com/products/commview/ It can run any windows 95/98/Me/NT/2000/XP/2003 systems. Copyright 2004 Sheng Bai 3

Main Menus IP Statistics Packets Logging Rules Alarms Copyright 2004 Sheng Bai 4

IPStatistics Copyright 2004 Sheng Bai 5

Packets Copyright 2004 Sheng Bai 6

Rules Copyright 2004 Sheng Bai 7

Sample Experiment CPU: Intel Pentium. III 1000 HZ Memory: 256 MB OS: Windows 2000 Porfessional IP: 24. 57. 41. 2(cogeco cable) Copyright 2004 Sheng Bai 8

Setting Rules Copyright 2004 Sheng Bai 9

Using Web Mail Copyright 2004 Sheng Bai 10

Result Copyright 2004 Sheng Bai 11

Advanced Experiment Copyright 2004 Sheng Bai 12

Advanced Rules Copyright 2004 Sheng Bai 13

Advanced Result Copyright 2004 Sheng Bai 14

Alarms Copyright 2004 Sheng Bai 15

Setting Alarms Copyright 2004 Sheng Bai 16

Setting Alarms Cont. Copyright 2004 Sheng Bai 17

Alarm Result Copyright 2004 Sheng Bai 18

Packet Generator Copyright 2004 Sheng Bai 19

Generating A Packet Copyright 2004 Sheng Bai 20

Result Copyright 2004 Sheng Bai 21

Summary Friendly Interface, Easy to manipulate Supports of a lot of popular protocols Have some special and useful tools Should use strong cryptography. Copyright 2004 Sheng Bai 22

Reference Loris Degioanni, Development of an Architecture for Packet Capture and Network Traffic Analysis, Gradu ation Thesis, Politecnico Di Torino (Turin, Italy, Mar. 2000) Horizon, Defeating Sniffers and Intrusion Detection Systems http: //unixgeeks. org/security/newbie//security/sniffer/ http: //www. tamos. com/products/commview/ http: //winpcap. polito. it/ Copyright 2004 Sheng Bai 23

Questions? Copyright 2004 Sheng Bai 24