1. Copyright 2004 Sheng Bai1 CommView Report for 60-592 By Sheng Bai

2. Copyright 2004 Sheng Bai2 Content  Introduction  Example  Alarm  Packet Generator  Summary  Reference

3. Copyright 2004 Sheng Bai3 Introduction  CommView is a program for monitoring Internet and Local Area Network (LAN) activity capable of capturing and analyzing network packets.  CommView is developed by Tamo Soft Inc. It is a commercial packet capture software.  you can download the 30-days free evaluation version from www.tamos.com/products/commview/www.tamos.com/products/commview/  It can run any windows95/98/Me/NT/2000/XP/2003 systems.

4. Copyright 2004 Sheng Bai4 Main Menus  IP Statistics  Packets  Logging  Rules  Alarms

5. Copyright 2004 Sheng Bai5 IPStatistics

6. Copyright 2004 Sheng Bai6 Packets

7. Copyright 2004 Sheng Bai7 Rules

8. Copyright 2004 Sheng Bai8 Sample Experiment CPU: Intel PentiumIII 1000HZ Memory: 256MB OS: Windows2000 Porfessional IP: 24.57.41.2(cogeco cable)

9. Copyright 2004 Sheng Bai9 Setting Rules

10. Copyright 2004 Sheng Bai10 Using Web Mail

11. Copyright 2004 Sheng Bai11 Result

12. Copyright 2004 Sheng Bai12 Advanced Experiment

13. Copyright 2004 Sheng Bai13 Advanced Rules

14. Copyright 2004 Sheng Bai14 Advanced Result

15. Copyright 2004 Sheng Bai15 Alarms

16. Copyright 2004 Sheng Bai16 Setting Alarms

17. Copyright 2004 Sheng Bai17 Setting Alarms Cont.

18. Copyright 2004 Sheng Bai18 Alarm Result

19. Copyright 2004 Sheng Bai19 Packet Generator

20. Copyright 2004 Sheng Bai20 Generating A Packet

21. Copyright 2004 Sheng Bai21 Result

22. Copyright 2004 Sheng Bai22 Summary  Friendly Interface, Easy to manipulate  Supports of a lot of popular protocols  Have some special and useful tools  Should use strong cryptography.

23. Copyright 2004 Sheng Bai23 Reference  Loris Degioanni, Development of an Architecture for Packet Capture and Network Traffic Analysis, Graduation Thesis, Politecnico Di Torino (Turin, Italy, Mar. 2000)Development of an Architecture for Packet Capture and Network Traffic Analysis  Horizon, Defeating Sniffers and Intrusion Detection SystemsDefeating Sniffers and Intrusion Detection Systems  http://unixgeeks.org/security/newbie//security/sniffer/ http://unixgeeks.org/security/newbie//security/sniffer/  http://www.tamos.com/products/commview/www.tamos.com/products/commview/  http://winpcap.polito.it/ http://winpcap.polito.it/

24. Copyright 2004 Sheng Bai24 Questions?