(?Sniffer (sniffer) is a commonly used method to collect effective data, which can be the user's account and password, or some commercial secret data and so on. Sniffer can be used as a device that can capture network packets. ISS defines Sniffer as follows: Sniffer is a tool that uses a computer's network interface to intercept data packets destined for other computers. The reasonable use of Sniffer is mainly to analyze the traffic of the network in order to find out the potential problems in the network of concern. For example, assuming that a certain segment of the network is not running very well, the transmission of packets is relatively slow, and we do not know where the problem lies, we can use a sniffer to make accurate problem identification at this moment. In a reasonable network, the existence of sniffer is crucial for system administrators, and system administrators can diagnose many invisible and ambiguous problems through sniffer, these problems involve abnormal communication between two or even multiple computers and even Involving various protocols, with the help of sniffer, system administrators can easily determine how much traffic belongs to which network protocol, which host accounts for the main communication protocol, which host is most of the communication destination, How long does it take to send a message, or the time interval for message transmission between hosts, etc. These information provide very valuable information for administrators to identify network problems and manage network areas.
Sniffer usage tutorial.pdf)