00413Portable_Install.book Page i Friday, March 25, 2005 2:22 PM INSTALLATION GUIDE Sniffer ® Portable VERSION 4.
100413Portable_Install.book Page ii Friday, March 25, 2005 2:22 PM COPYRIGHT © 2005 Network General Corporation. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of Network General Corporation or its suppliers or affiliate companies.
100413Portable_Install.book Page iii Friday, March 25, 2005 2:22 PM Contents Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . v Audience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . v Getting More Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . v Contacting Network General . . . . . . . . . . . . . . . . . . . . . .
100413Portable_Install.book Page iv Friday, March 25, 2005 2:22 PM Contents Installing Adapters and Sniffer Enhanced Drivers on Windows XP . . . . . . . . . . . . . . . . 19 Installing Adapters and Sniffer Enhanced Drivers on Windows NT . . . . . . . . . . . . . . . . 21 Installing Adapters and Sniffer Enhanced Drivers on Windows 2000 . . . . . . . . . . . . . . 23 First-time Installation (Windows 2000) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
100413Portable_Install.book Page v Friday, March 25, 2005 2:22 PM Preface Sniffer® Portable is a powerful network analysis tool that enables you to monitor and troubleshoot your network.
100413Portable_Install.book Page vi Friday, March 25, 2005 2:22 PM Preface vi Sniffer Portable Source Contents Sniffer Mobile Operations Guide Provides information specific to configuring, and operating Sniffer Mobile. Sniffer Mobile provides decodes and Expert Analysis for Mobile IP protocols. Sniffer Reporter Describes how to install and configure Sniffer Reporter to generate a wide variety of reports based on data collected by Sniffer network analysis and monitoring products.
100413Portable_Install.book Page vii Friday, March 25, 2005 2:22 PM Preface Source Contents Snifferbook Reference Guide Describes how to install, connect, and configure Sniffer Portable when using the Snifferbook. Help Product information that is accessed from within the application. Release Notes • The Help system provides high-level and detailed information. Access from either the Help menu option or the Help button in the application.
100413Portable_Install.book Page viii Friday, March 25, 2005 2:22 PM Preface Contacting Network General Customer Service Get help with license entitlement, registrations, grant number inquiries, tech support validation and more by contacting the Network General Customer Service department at: North America phone: 1-800-764-3337 (1-800-SNIFFER) Email: support@networkgeneral.com Web: http://www.networkgeneral.com/ContactUs.
100413Portable_Install.book Page ix Friday, March 25, 2005 2:22 PM Preface Customer Service International Address Network General International BV (EMEA) Customer Service Department PO Box 58326 1040 HH Amsterdam The Netherlands Technical Support Visit Network General Technical Support at: • Sniffer University http://www.networkgeneral.com/TechnicalSupport.
0413Portable_Install.
100413Portable_Install.book Page 1 Friday, March 25, 2005 2:22 PM Installing Snif fer Por table 1 Overview This chapter provides the system requirements, installation instructions, and upgrade instructions for the Sniffer Portable software, and introduces the Network General supported adapters and enhanced drivers.
100413Portable_Install.book Page 2 Friday, March 25, 2005 2:22 PM Chapter 1 Table 1-1. Sniffer Portable System Requirements Item Requirement Browser with Internet Access Microsoft Internet Explorer 6.0 SP 1 Media Player Media Player: Additional Software • Version 6.4.07.1112 on Windows NT • Version 7.00.00.1954 on Windows 2000 • Version 8.00.00.4487 on Windows XP Crystal Reports 8.
100413Portable_Install.book Page 3 Friday, March 25, 2005 2:22 PM Installing Sniffer Portable Before Installing Sniffer Portable The Sniffer Portable Application CD includes the software you need to get started using Sniffer Portable. Before installing Sniffer Portable, review the following installation notes: For Windows XP and NT: To install the Sniffer Portable software on a Windows XP or NT system, you must have system administrator (sa) privileges.
100413Portable_Install.book Page 4 Friday, March 25, 2005 2:22 PM Chapter 1 Uninstalling Previous Versions of Sniffer Portable Installing Sniffer Portable 4.8 on top of an existing Sniffer Portable 4.5 or 4.7 release is not supported. Only upgrades from an existing Sniffer Portable 4.70.5xx installation are supported. To install on top of an earlier Sniffer Portable 4.5 or 4.7 release, uninstall the earlier and then install Sniffer Portable 4.8. Future updates of Sniffer Portable 4.
100413Portable_Install.book Page 5 Friday, March 25, 2005 2:22 PM Installing Sniffer Portable Trigger files Display Setup settings Address Book entries Settings specified within the Tools > Options menu Settings specified within the Tools > Expert Options menu Switches added using the Monitor > Switch command Settings specified within the Database > Options menu NOTE: .csv files are updated with data for Sniffer Portable 4.8, however the .
100413Portable_Install.book Page 6 Friday, March 25, 2005 2:22 PM Chapter 1 data, you can re-enable the unused adapter if desired. 2 From the Sniffer Portable Application CD, double-click SnifferPro.exe. If the target PC supports the autorun function, an installation menu will automatically appear after inserting the Application CD. Select the Install Product option from this menu.
100413Portable_Install.book Page 7 Friday, March 25, 2005 2:22 PM Installing Sniffer Portable Uninstalling the QoS Packet Scheduler Service The QoS Packet Scheduler service supports the 802.1P traffic prioritization system, allowing for the implementation of best-effort Quality of Service by conforming 802.1P equipment. The service is optional on Windows 2000. However, on Windows XP, the service is automatically bound to each installed adapter driver.
100413Portable_Install.book Page 8 Friday, March 25, 2005 2:22 PM Chapter 1 Figure 1-1.
100413Portable_Install.book Page 9 Friday, March 25, 2005 2:22 PM Installing Sniffer Portable Figure 1-2. Local Area Connection Properties Dialog Box 3 De-select the QoS Packet Scheduler entry and click Uninstall. A confirmation box appears. 4 Click OK to confirm that you want to uninstall the QoS Packet Scheduler service completely. The QoS Packet Scheduler service is uninstalled. 5 Click OK on the Connection Properties dialog box.
100413Portable_Install.book Page 10 Friday, March 25, 2005 2:22 PM Chapter 1 The Network Connection Properties dialog box appears, as in Figure 1-2 on page 9. 3 De-select the checkbox next to the QoS Packet Scheduler entry and click OK. 4 Repeat this procedure for each adapter you want to use with Sniffer Portable.
100413Portable_Install.book Page 11 Friday, March 25, 2005 2:22 PM Installing Sniffer Portable Supported Adapters and Sniffer Enhanced Drivers The Sniffer Portable Application CD includes Sniffer enhanced drivers for supported network adapter cards. Enhanced drivers modify the adapter to provide additional functionality to the card. For example, an enhanced driver may enable you to view additional network data or improve Sniffer Portable performance by capturing and decoding more traffic on busy networks.
100413Portable_Install.book Page 12 Friday, March 25, 2005 2:22 PM Chapter 1 Additional Enhanced Driver Installation Resources Table 1-3 contains a list of adapters and enhanced drivers supported by Sniffer Portable that are not documented in this guide. Please see the document listed below for detailed information and installation instructions for that adapter and enhanced driver. Table 1-3.
100413Portable_Install.
100413Portable_Install.book Page 14 Friday, March 25, 2005 2:22 PM Chapter 2 Authorizing Sniffer Portable The Sniffer Portable software comes with a temporary license that is configured to expire 15 days after the application starts for the first time. After connecting to Sniffer Portable for the first time, you will see a message indicating you need to authorize the software within 15 days. This 15-day period is called the "pre-authorization" period.
100413Portable_Install.book Page 15 Friday, March 25, 2005 2:22 PM Authorizing Sniffer Portable Figure 2-1. Request Authorization Dialog Box 4 In the Request Authorization dialog box enter your company name and your grant number(s) in the fields provided. Separate multiple grant numbers with a comma. 5 Under Select Options to be enabled, select the options to be enabled for the Sniffer Portable machine. Options include: 6 Sniffer Portable LAN.
100413Portable_Install.book Page 16 Friday, March 25, 2005 2:22 PM Chapter 2 NOTE: The RequestOptions.log and EnableOptions.log are generated during the Request Authorization and Enable Authorization process. If you encounter problems, check the appropriate log file in the installation directory. The default directory on XP, Windows 2000 and NT machines is C:\Program Files\NAI\SnifferNT\Program. 7 Click OK when the Authorization window confirms the Request Authorization file was generated successfully.
100413Portable_Install.book Page 17 Friday, March 25, 2005 2:22 PM Authorizing Sniffer Portable 3 Click OK and Exit. The Sniffer Portable PC will automatically reboot. 4 Confirm that the authorization process was successful after the machine reboots: a Start Sniffer Portable and go to Help > About. The newly enabled options will appear in the dialog box. NOTE: The RequestOptions.log and EnableOptions.log are generated during the Request Authorization and Enable Authorization process.
100413Portable_Install.
100413Portable_Install.book Page 19 Friday, March 25, 2005 2:22 PM Installing Adapters and Snif fer Enhanced Drivers 3 Overview After installing the Sniffer Portable software, install the adapter and Sniffer enhanced driver appropriate to your Sniffer Portable configuration. This chapter provides detailed installation instructions for the Sniffer enhanced drivers for Ethernet adapters. NOTE: Unless otherwise noted, the instructions support Notebook PC, PAC 65, and Sniffer FlexPAC platforms.
100413Portable_Install.book Page 20 Friday, March 25, 2005 2:22 PM Chapter 3 Table 3-2. Windows XP Sniffer Enhanced Driver Locations Supported Adapter : \Program Files\NAI \SnifferNT\Driver\en\... Sniffer (Intel Pro 100) Intel\WinXP Sniffer (Xircom) Xircom\WinXP Sniffer (IBM Etherjet) IBM\WinXP Adaptec 62011 Adaptec.620XX\WinXP To install a Sniffer supported adapter and driver in Windows XP: 1 Make sure the Sniffer Portable software is installed.
100413Portable_Install.book Page 21 Friday, March 25, 2005 2:22 PM Installing Adapters and Sniffer Enhanced Drivers 13 Click Open in the Browse dialog box. You are returned to the Install from Disk dialog box. 14 Click OK on the Install from Disk dialog box. If the operating system is configured to alert you to unsigned drivers, a dialog box will appear warning you that you are about to install a driver that has not been verified by Microsoft Corporation.
100413Portable_Install.book Page 22 Friday, March 25, 2005 2:22 PM Chapter 3 To install adapters and Sniffer enhanced drivers on Windows NT: 1 Ensure Sniffer Portable software is installed. If it is not installed, install it now. 2 If you have a previously installed driver (a previous version of a Sniffer driver or another vendor’s driver), you must first uninstall the driver before installing the Sniffer enhanced driver.
100413Portable_Install.book Page 23 Friday, March 25, 2005 2:22 PM Installing Adapters and Sniffer Enhanced Drivers Obtain an IP address from a DHCP server. Reads and assigns the IP address for the driver automatically. Specify an IP address. You must manually enter IP address information for the driver in each field. 18 Click OK. 19 Click Close. 20 If an application error occurs in rundll32.exe, click Cancel in the error message box. All added or modified settings will be saved.
100413Portable_Install.book Page 24 Friday, March 25, 2005 2:22 PM Chapter 3 Updating Existing Drivers (Windows 2000) on page 25 First-time Installation (Windows 2000) For Windows 2000, you install the adapter and driver for the first time by inserting the card in the PC and using the Found New Hardware Wizard, as follows. To install an adapter and driver in Windows 2000 for the first time: 1 Make sure the Sniffer Portable software is installed. If it is not installed, install it now.
100413Portable_Install.book Page 25 Friday, March 25, 2005 2:22 PM Installing Adapters and Sniffer Enhanced Drivers 9 Click Next on the Driver Files Search Results window. The Digital Signature Not Found warning appears asking you if you want to continue the installation. 10 Click Yes on the Digital Signature Not Found warning to continue the installation. 11 Click Finish. 12 Restart the computer.
100413Portable_Install.book Page 26 Friday, March 25, 2005 2:22 PM Chapter 3 The Upgrade Device Driver Wizard starts. 8 Click Next in the Welcome dialog box. 9 In the Install Hardware Device Drivers dialog box, select “Display a list of known drivers for this device so that I can choose a specific driver” and click Next. Figure 3-1. Install Hardware Device Drivers (Adaptec Example) 10 In the Select Network Adapter dialog box, select the appropriate adapter and click Have Disk.
100413Portable_Install.book Page 27 Friday, March 25, 2005 2:22 PM Installing Adapters and Sniffer Enhanced Drivers 11 In the Install From Disk dialog box, browse to the location of the Sniffer enhanced driver. See Table 3-4 for Sniffer enhanced driver locations. Click OK. 12 In the Select Network Adapter dialog box, click Next. Figure 3-3. Select Network Adapter Dialog Box (Adaptec Example) 13 In the Start Device Driver Installation dialog box, click Next. Figure 3-4.
100413Portable_Install.book Page 28 Friday, March 25, 2005 2:22 PM Chapter 3 14 At the message “Digital Signature Not Found,” click Yes to successfully continue the Sniffer enhanced driver update. 15 Click Finish. 16 Restart the computer. Notes on Previous Driver Installations on Windows 2000 For backup purposes, if you had previously installed drivers, your original drivers are copied into the :\Program Files\Nai\Sniffer\Driver\en\ \Win2K directory.
100413Portable_Install.book Page 29 Friday, March 25, 2005 2:22 PM Installing Madge Adapters and Enhanced Drivers 4 Overview After installing the Sniffer Portable software, install the adapter and enhanced driver appropriate to your Sniffer Portable configuration. This chapter provides detailed installation instructions for Madge adapters and Sniffer enhanced drivers.
100413Portable_Install.book Page 30 Friday, March 25, 2005 2:22 PM Chapter 4 Installing Madge Adapters and Enhanced Drivers The instructions provided in this section detail installing supported Madge adapters and enhanced drivers for PII, PIII and FlexPAC systems. Windows NT The Madge adapters and the Sniffer enhanced drivers for Windows NT are not plug and play and must be manually installed.
100413Portable_Install.book Page 31 Friday, March 25, 2005 2:22 PM Installing Madge Adapters and Enhanced Drivers 0A20, 1A20, 2A20, and 3A20 . 10 Choose an available I/O address from the supported list in Step 9 and record the number for later use. 11 Click OK to exit the Windows NT Diagnostics dialog. 12 Next run the Token Ring configuration program from DOS to configure the hardware settings on the Madge ISA adapter card.
100413Portable_Install.book Page 32 Friday, March 25, 2005 2:22 PM Chapter 4 Previous Adapter Installations on Windows NT If you have a Madge adapter card installed and working with a non-Sniffer driver, you should install the Sniffer enhanced driver. The instructions provided in this section detail installing enhanced drivers for pre-existing or pre-installed Madge adapters on your Sniffer PC.
100413Portable_Install.book Page 33 Friday, March 25, 2005 2:22 PM Installing Madge Adapters and Enhanced Drivers Windows XP The Sniffer enhanced drivers for Windows XP are plug and play drivers. The Madge enhanced drivers are placed in the : \Program Files\Nai\SnifferNT\Driver\en\TRMadge\WinXP directory during the Sniffer Portable installation. To install Madge adapters and enhanced drivers in Windows XP: 1 Make sure the Sniffer Portable software is installed.
100413Portable_Install.book Page 34 Friday, March 25, 2005 2:22 PM Chapter 4 The Install from Disk dialog box appears prompting you to supply the path to the driver to install. 13 Click the Browse button and navigate to the path where the driver for the selected adapter is installed. The drivers for Madge adapters on Windows XP are located at: : \Program Files\Nai\SnifferNT\Driver\en\ TRMadge\WinXP 14 Click Open on the Browse dialog box.
100413Portable_Install.book Page 35 Friday, March 25, 2005 2:22 PM Installing Madge Adapters and Enhanced Drivers 4 5 Click the Advanced tab and make the following configuration changes: Set Promiscuous mode support to Yes. Set Respond to TEST/XID frames to No. Set Ring Speed to 16 Mbit/s. Click Close. Windows 2000 The Madge enhanced drivers are placed in the : \Program Files\Nai\SnifferNT\Driver\en\TRMadge directory during the Sniffer Portable installation.
100413Portable_Install.book Page 36 Friday, March 25, 2005 2:22 PM Chapter 4 The Install Hardware Device Drivers window appears. 5 Select the Search for a suitable driver for my device option and click Next. The Locate Driver Files window appears. 6 Check only the Specify a location option and click Next. The Found New Hardware Wizard prompts you to supply a path to the device driver.
100413Portable_Install.book Page 37 Friday, March 25, 2005 2:22 PM Installing Madge Adapters and Enhanced Drivers 4 Start the Device Manager as follows: a Right-click the My Computer icon and select the Properties command from the menu that appears. b In the dialog box that appears, click the Hardware tab. c Click the Device Manager button. d Expand the Network Adapters entry by clicking the + sign adjacent to its entry.
100413Portable_Install.book Page 38 Friday, March 25, 2005 2:22 PM Chapter 4 21 Manually configure the Madge Mk2 driver for Sniffer Portable operations using the procedure in Configuring Madge Mk2 PCMCIA\CardBus Adapters (Windows 2000) on page 38. Configuring Madge Mk2 PCMCIA\CardBus Adapters (Windows 2000) Before you can use the Madge Mk2 PCMCIA or CardBus adapter with Sniffer Portable on a Windows 2000 PC, you must set some configuration options manually. The following procedure explains how.
100413Portable_Install.book Page 39 Friday, March 25, 2005 2:22 PM Installing Madge Adapters and Enhanced Drivers Installing Madge PCI Adapters and Enhanced Drivers The instructions provided in this section detail installing supported Madge PCI adapters and enhanced drivers for PII, PIII and FlexPAC systems.
100413Portable_Install.book Page 40 Friday, March 25, 2005 2:22 PM Chapter 4 13 In the Network dialog box, click Close to perform the bindings. The TCP/IP Setup dialog box appears. 14 In the Adapter drop down list, select the installed adapter. 15 Enter the IP Address and Subnet Mask, and click OK. 16 Restart the computer.
100413Portable_Install.book Page 41 Friday, March 25, 2005 2:22 PM Installing Madge Adapters and Enhanced Drivers 7 Double-click the Network icon, then click the Adapters tab. 8 Click Add. 9 In the Select Network Adapter dialog box, click Have Disk. 10 In the Insert Disk dialog box specify the complete path for the Madge PCMCIA or CardBus adapter enhanced driver. 11 Click OK. 12 In the Select OEM Option dialog box, select Sniffer (Madge) PCMCIA/CardBus Adapter MK2 and click OK.
100413Portable_Install.
100413Portable_Install.
100413Portable_Install.
100413Portable_Install.
100413Portable_Install.