Re: W2K server "sniffer"

[Chris R <admin () securityindex net>]

In-Reply-To: <340CB37EAEF9A446BF97EC24D80AE1F6C42FB1 () nts-65 adpc purdue edu>

Its been a little while since ive used win2k server  but i believe it has 
Microsofts Network Monitor available to you when you install. As long as 
you have the original install CD you should be able to install it from 
there. I dont reccomend it by any means but if your asking for a network 
analyzer that comes default with the operating system itself, then thats 
the one. Microsoft network monitor.

-- chris


> Received: (qmail 25394 invoked from network); 29 May 2003 17:00:40 -0000
> Received: from outgoing2.securityfocus.com (205.206.231.26)
>  by mail.securityfocus.com with SMTP; 29 May 2003 17:00:40 -0000
> Received: from lists.securityfocus.com (lists.securityfocus.com 
[205.206.231.19])
>       by outgoing2.securityfocus.com (Postfix) with QMQP
>       id 01CF48F2D7; Thu, 29 May 2003 11:06:51 -0600 (MDT)
> Mailing-List: contact security-basics-help () securityfocus com; run by ezmlm
> Precedence: bulk
> List-Id: <security-basics.list-id.securityfocus.com>
> List-Post: <mailto:security-basics () securityfocus com>
> List-Help: <mailto:security-basics-help () securityfocus com>
> List-Unsubscribe: <mailto:security-basics-unsubscribe () securityfocus com>
> List-Subscribe: <mailto:security-basics-subscribe () securityfocus com>
> Delivered-To: mailing list security-basics () securityfocus com
> Delivered-To: moderator for security-basics () securityfocus com
> Received: (qmail 30252 invoked from network); 28 May 2003 16:07:26 -0000
> Message-ID: <340CB37EAEF9A446BF97EC24D80AE1F6C42FB1@nts-
65.adpc.purdue.edu>
> From: "Wei, Grant G." <gwei () purdue edu>
> To: security-basics () securityfocus com
> Subject: W2K server "sniffer"
> Date: Wed, 28 May 2003 11:34:34 -0500
> MIME-Version: 1.0
> X-Mailer: Internet Mail Service (5.5.2655.55)
> MIME-Version: 1.0
> Content-Type: multipart/signed;
>       protocol="application/x-pkcs7-signature";
>       micalg=SHA1;
>       boundary="----=_NextPart_000_00C0_01C3250D.14F810F0"
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
>
> ------=_NextPart_000_00C0_01C3250D.14F810F0
> Content-Type: text/plain;
>       charset="us-ascii"
> Content-Transfer-Encoding: 7bit
>
> Is there a mechanism in W2K Server that allows packet sniffing type of
> activity?
>
> ------=_NextPart_000_00C0_01C3250D.14F810F0
> Content-Type: application/x-pkcs7-signature;
>       name="smime.p7s"
> Content-Transfer-Encoding: base64
> Content-Disposition: attachment;
>       filename="smime.p7s"
>
> MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIII6TCCAn
gw
> ggHhoAMCAQICAwnsrTANBgkqhkiG9w0BAQQFADCBkjELMAkGA1UEBhMCWkExFTATBgNVBAgTDF
dl
> c3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3duMQ8wDQYDVQQKEwZUaGF3dGUxHTAbBgNVBA
sT
> FENlcnRpZmljYXRlIFNlcnZpY2VzMSgwJgYDVQQDEx9QZXJzb25hbCBGcmVlbWFpbCBSU0EgMj
Aw
> MC44LjMwMB4XDTAzMDUxMjE5Mzg1NFoXDTA0MDUxMTE5Mzg1NFowQTEfMB0GA1UEAxMWVGhhd3
Rl
> IEZyZWVtYWlsIE1lbWJlcjEeMBwGCSqGSIb3DQEJARYPZ3dlaUBwdXJkdWUuZWR1MIGfMA0GCS
qG
> SIb3DQEBAQUAA4GNADCBiQKBgQCyICoigMMqTwrzjYqsnU0D+mKTiEuE+qi7EtM+kl3gyE84lQ
Xl
> b48yM1wA1NTAyGCaVPCIFFToG0H4n3Ro3AHkWfCQysawu1xewV/37+bjmGPbFQI2Sz63tZNI2c
e5
> 9ML4jc83FCqbH38D7vyQZlHqMnS8Bj6JgsFVXL10DvnsUwIDAQABoywwKjAaBgNVHREEEzARgQ
9n
> d2VpQHB1cmR1ZS5lZHUwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQQFAAOBgQB5VQiSOjYCqU
+W
> kGa+UEbs/+Bwlu4gSl1ImLr3Q7J8Iso7ZkL9o2vDHJ43R2kKiT2zJegOieFCM7m14AtLsFLHfi
iL
> /q7kgNZyAtHS0zbdHPOJlCrc9oifBtQWpZAm+9qoUD1CYCVQtfbf4O4YOnSWT7naYBZPRcIdff
V1
> aZxbhjCCAy0wggKWoAMCAQICAQAwDQYJKoZIhvcNAQEEBQAwgdExCzAJBgNVBAYTAlpBMRUwEw
YD
> VQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEaMBgGA1UEChMRVGhhd3RlIE
Nv
> bnN1bHRpbmcxKDAmBgNVBAsTH0NlcnRpZmljYXRpb24gU2VydmljZXMgRGl2aXNpb24xJDAiBg
NV
> BAMTG1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBDQTErMCkGCSqGSIb3DQEJARYccGVyc29uYW
wt
> ZnJlZW1haWxAdGhhd3RlLmNvbTAeFw05NjAxMDEwMDAwMDBaFw0yMDEyMzEyMzU5NTlaMIHRMQ
sw
> CQYDVQQGEwJaQTEVMBMGA1UECBMMV2VzdGVybiBDYXBlMRIwEAYDVQQHEwlDYXBlIFRvd24xGj
AY
> BgNVBAoTEVRoYXd0ZSBDb25zdWx0aW5nMSgwJgYDVQQLEx9DZXJ0aWZpY2F0aW9uIFNlcnZpY2
Vz
> IERpdmlzaW9uMSQwIgYDVQQDExtUaGF3dGUgUGVyc29uYWwgRnJlZW1haWwgQ0ExKzApBgkqhk
iG
> 9w0BCQEWHHBlcnNvbmFsLWZyZWVtYWlsQHRoYXd0ZS5jb20wgZ8wDQYJKoZIhvcNAQEBBQADgY
0A
> MIGJAoGBANRp19SwlGRbcelH2AxRtupykbCEXn0tDY97Et+FJXUodDpCLGMnn5V7S+9+GYcdhu
qj
> 3bnOlmQawhRuRKx85o/oTQ9xH0A4pgCjh3j2+ZSGXq3qwF5269kUo11uenwMpUtVfwYZKX+emi
bV
> ars4JAhqmMex2qOYkf152+VaxBy5AgMBAAGjEzARMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhv
cN
> AQEEBQADgYEAx+ySfk749ZalZ2IqpPBNEWDQb41gWGGsJrtSNVwIzzD7qEqWih9iQiOMFw/0um
Sc
> F6xHKd+dmF7SbGBxXKKs3Hnj524ARx+1DSjoAp3kmv0T9KbZfLH43F8jJgmRgHPQFBveQ6mDJf
Lm
> nC8Vyv6mq4oHdYsM3VGEa+T40c53ooEwggM4MIICoaADAgECAhBmRXK3zHT1z2N2RYTQLpEBMA
0G
> CSqGSIb3DQEBBAUAMIHRMQswCQYDVQQGEwJaQTEVMBMGA1UECBMMV2VzdGVybiBDYXBlMRIwEA
YD
> VQQHEwlDYXBlIFRvd24xGjAYBgNVBAoTEVRoYXd0ZSBDb25zdWx0aW5nMSgwJgYDVQQLEx9DZX
J0
> aWZpY2F0aW9uIFNlcnZpY2VzIERpdmlzaW9uMSQwIgYDVQQDExtUaGF3dGUgUGVyc29uYWwgRn
Jl
> ZW1haWwgQ0ExKzApBgkqhkiG9w0BCQEWHHBlcnNvbmFsLWZyZWVtYWlsQHRoYXd0ZS5jb20wHh
cN
> MDAwODMwMDAwMDAwWhcNMDQwODI3MjM1OTU5WjCBkjELMAkGA1UEBhMCWkExFTATBgNVBAgTDF
dl
> c3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3duMQ8wDQYDVQQKEwZUaGF3dGUxHTAbBgNVBA
sT
> FENlcnRpZmljYXRlIFNlcnZpY2VzMSgwJgYDVQQDEx9QZXJzb25hbCBGcmVlbWFpbCBSU0EgMj
Aw
> MC44LjMwMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMzKmY8cJJUU+0m54J2eBxdqIGY
KX
> DuNEKYpjNSptcDz63K737nRvMLwzkH/5NHGgo22Y8cNPomXbDfpL8dbdYaX5hc1VmjUanZJ1qC
eu
> 2HL5ugL217CR3hzpq+AYA6h8Q0JQUYeDPPA5tJtUihOH/7ObnUlmAC0JieyUa+mhaQIDAQABo0
4w
> TDApBgNVHREEIjAgpB4wHDEaMBgGA1UEAxMRUHJpdmF0ZUxhYmVsMS0yOTcwEgYDVR0TAQH/BA
gw
> BgEB/wIBADALBgNVHQ8EBAMCAQYwDQYJKoZIhvcNAQEEBQADgYEAMbFLR135AXHl9VNsXXnWPZ
jA
> JhNigSKnEvgilegbSbcnewQ5uvzm8iTrkfq97A0qOPdQVahs9w2tTBu8A/S166JHn2yiDFiNMU
IJ
> EWywGmnRKxKyQF1q+XnQ6i4l3Yrk/NsNH50C81rbyjz2ROomaYd/SJ7OpZ/nhNjJYmKtBcYxgg
Np
> MIIDZQIBATCBmjCBkjELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1
UE
> BxMJQ2FwZSBUb3duMQ8wDQYDVQQKEwZUaGF3dGUxHTAbBgNVBAsTFENlcnRpZmljYXRlIFNlcn
Zp
> Y2VzMSgwJgYDVQQDEx9QZXJzb25hbCBGcmVlbWFpbCBSU0EgMjAwMC44LjMwAgMJ7K0wCQYFKw
4D
> AhoFAKCCAiQwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMDMwNT
I4
> MTYzNDIxWjAjBgkqhkiG9w0BCQQxFgQUEikwrgAipWlvu1+BEQPndItqf4UwZwYJKoZIhvcNAQ
kP
> MVowWDAOBggqhkiG9w0DAgICAIAwBwYFKw4DAhowCgYIKoZIhvcNAwcwDQYIKoZIhvcNAwICAU
Aw
> BwYFKw4DAgcwDQYIKoZIhvcNAwICASgwCgYIKoZIhvcNAgUwgasGCSsGAQQBgjcQBDGBnTCBmj
CB
> kjELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3
du
> MQ8wDQYDVQQKEwZUaGF3dGUxHTAbBgNVBAsTFENlcnRpZmljYXRlIFNlcnZpY2VzMSgwJgYDVQ
QD
> Ex9QZXJzb25hbCBGcmVlbWFpbCBSU0EgMjAwMC44LjMwAgMJ7K0wga0GCyqGSIb3DQEJEAILMY
Gd
> oIGaMIGSMQswCQYDVQQGEwJaQTEVMBMGA1UECBMMV2VzdGVybiBDYXBlMRIwEAYDVQQHEwlDYX
Bl
> IFRvd24xDzANBgNVBAoTBlRoYXd0ZTEdMBsGA1UECxMUQ2VydGlmaWNhdGUgU2VydmljZXMxKD
Am
> BgNVBAMTH1BlcnNvbmFsIEZyZWVtYWlsIFJTQSAyMDAwLjguMzACAwnsrTANBgkqhkiG9w0BAQ
EF
> AASBgAhxt2pLB51Dw4dOWsovsRVSIuIkV6U8asS6LMYH2xV/C4npiPUvQ6OOQoe8Xl9heGYS8j
S9
> 103uisOaI98kI+Wt24J8dnbb0YHgeVevMu4Lqa8WyAJz9VsT59pGsXKzcUH4fbhvcZtUNyFXGb
ZE
> DD0gYgQNKMbQy/RoFW0Ze11uAAAAAAAA
>
> ------=_NextPart_000_00C0_01C3250D.14F810F0--

---------------------------------------------------------------------------
----------------------------------------------------------------------------