Home

User Manual

1. It brings offers an innovative new concept of Active Management into the corporate infrastructure and replaces the traditional ways of managing for the sake of management Passive management methods use D your future life QNO Technology QnoSniff Professional 2 0 negative reinforcement to notify the employee after the fact which can easily trigger a sense of rejection and result in management issues QnoSniff Professional provides ranking of traffic flows that can be checked by everyone to review their individual network usage e g chatting and downloading etc When the employee realizes that they are currently being ranked it is easier to cut back through this concept of self management Traffic ranking also applies to other types of services which the network administrator will be able to identify user behaviors within the local network With better design and planning of the network infrastructure and management system we will be able to maximize the efficiency of corporate operations QnoSniff Professional also supports PDF output and e mail forwarding features for generating offline files to be sent out for review D your future life QNO Technology QnoSniff Professional 2 0 ll QnoSniff Professional Installation and Configuration This chapter includes pre installation preparations the installation process and QnoSniff basic configurations 2 1 Pre installation preparations Minimum hardware spec
2. 9 2 Department ranking The traffic by departments is mainly sorted by traffic flow and communication protocol for example instant messaging traffic for all departments ranking from highest to lowest Department Traffic Ranking O Daily 2009 10 19 Fin Protocol Search DX Mail Department Percent ster a O Sales 0 0 00 TotalFluxs You can specify the time period communication protocol types to display the traffic statistics for all departments To view the detailed traffic data for all users under the department for a specific communication protocol click on the hyperlink for the department name e g Sales to show all users Specify the communication protocol e g E mail to show the traffic ranking volume and percentage etc as below User Traffic Ranking ReportType Daily 2009 09 30 fie Department o EMAIL Search DX Mail No IP Address User Name Host Name MAC Flux MB Percent 1 192 168 0 247 00 16 36 16 1D 60 5 25 O 73 74 2 192 168 1 152 00 20 ED 8F 7F 55 0 9 EE 12 64 3 192 168 1 169 00 16 36 26 21 E8 0 35 A 4 92 4 192 168 0 216 YOSHIKUN 423C17 0 08 1 12 5 192 168 1 197 00 18 F3 60 80 64 0 08 1 12 6 192 168 2 153 00 0F B0 95 43 55 0 08 I 1 12 7 192 168 2 161 00 11 D8 BF SF 0D 0 07 0 98 8 192 168 0 220 00 15 58 87 DD 30 0 04 0 56 9 192 168 1 188 00 24 1D 8C 5B 46 0 03 0 42 10 192 168 1 236 00 0F EA 4C 65 85 0 03 0 42 11 192 168 0 188 00 1D 7D 08 D5 60 0 02 0 28 12 192 168
3. Connection Status Remote Setting Remote Port Setting I 1 Monitoring target The NIC for packet traffic monitoring QnoSniff Professional will capture the network information from your PC you may also select it from the pull down menu The NIC to be monitored must be connected with Ethernet cable to the mirror port on the router 30 D your future life QNO Technology QnoSniff Professional 2 0 ka Network adapter Adapter for senerie dialup and VEN capture o Interface Information Network adapter Intelik Wireless M AS AGN Micros Please Select Interface Network adapter Realtek RTLE169 8110 Family Gigabit Ether Device Account Device Pa word AN Connection Status Off line 2 After selecting the correct monitoring target the IP and MAC address will automatically be shown 3 Login account password Enter the router account password with which you connected to the PC and then click Save to verify the connection 4 If you receive the Action Failed message after clicking Save check the following 1 Incorrect router account password please enter again 2 Connection issue between router and PC confirm connection to mirror port 3 Router support for QnoSniff Professional is not enabled please follow the instructions in the previous chapter 5 After saving the router account password the connection between QnoSniff Professional and the router will be verified The mess
4. 0 de gt lt planmanns 2 Fic eat cas ore comes gt gt Pak ar A E 254 192 168 0 247 ee i ge alessandro de gt lt a Ra 6 15 outlook Open Eg I te ath pais denapp alessandro ALCINEE 10 90 0 HA gt de gt lt langemann Fale szandro de gt Search rule 1 Date Select the date time range to lookup data Time Search rule 2 Select the search filters below Search rule 3 IP address username computer name MAC address sender e mail address recipient e mail address subject of e mail Search After specifying the search filter click Search button to update the data list E mail Each login account will come with a specific e mail inbox from System and Authorization Management gt User Management that the e mail function can send current page you are viewing in the PDF format Delete Put a checkmark in the box to the left of each entry in the list to set for deletion PDF only available on If logging in from the PC with QnoSniff Professional installed click on the local installation version PDF button to convert the page into a PDF file to be saved on another hard drive or directory 71 D your future life Previous 10 pages Previous page Next page Next 10 pages Gotopage_ Every page _ records Data list columns Date time IP address Username Host name MAC Sender Recipient Subject Size Downloading QNO Technology QnoSniff Professional 2 0 Click this butto
5. GING your future life QnoSniff Professional 2 0 English User s Manual your future life QnoSniff Professional 2 0 Contents i RKOJUCUON PAPA A Oak hCG E E OSY 4 ll QnoSniff Professional Installation and Configuration ooooooomomos 6 2 1 Pre installation preparations RAA o EE iaa 6 2 2 Required components during QnoSniff Professional installation sssuu eee ooo aaa aaa aaa aaa aaa aaaa eee ea aa aiaaaa 6 2 3 Example topology tor system dista OUI OM misericordia ricardo dies 7 PA TRS 1a jes FA CEJ PRO OE 7 Ili USING QAO OMIM Professional sza O R i w a 25 Router settings before usine Ono Malasia idad io 2 32 Launching QnoSmitf Protestas 28 lv BASIC MA o OOOO OE 37 V System and Authorization Management ooocccooccconncconnccononccnnncconoccnnonccnnoccnnoncconoconnocccnnoccnnaccnnss 44 dal Eee COn ra OWA OO A kadzi 44 92 S60 IV Ai SOT Alana dad A E IN OO O kad dodac kai dereoandaisvecandecesdospicdinadivase 47 gt rte e tant one o PUES E A 49 MI User GIOUD CONTIGUA MO Misato 50 is PPE 50 IS A nee sane A A A E A E OAZA sk Oo E E A 52 VII System Resource and AnallySls cccssssccssssscsssssccsssscsssscssssssscsssssssssssscssssssssscsssssssssssssssonees 56 AEG ERIS A 56 ZNIEMODFUSA tia 62 PODA DZ SOA K e O 63 NY UUs eo UVTI Vi edi id ii add Wi dO RW 65 Cd TS MIM CU SEE 66 VY AT SLI 1I O t rellenas 68 A AA EAA A as 71 AEE GAZ JET E E E A PO E CE 75 SO O
6. 13 14 15 16 17 16 13 ZU Llei zea 2D 27 28 30 a Today 10 20 2003 and can be directly clicked on to show the line chart with the max min average values within the time period shown under the chart The calendar report is as described below 1 Select daily report Select the date on the calendar to indicate the CPU usage for the day 0 24 hr For example selecting 9 29 09 indicates the CPU usage record for the day on 9 29 09 57 D your future life QNO Technology QnoSniff Professional 2 0 2 CPU Usage Report Type ae _ FB rj 5 LA Pb O GO LA LI wo 7 157 1 6 1 6 1 5 1 4 1 3 1 3 Ll 1 1 1 0 0 9 0 3 0 a Ue 0 6 0 6 0 5 0 4 0 3 0 3 0 2 0 1 0 0 0 0 O 09 LA ooh 0 n 00 01 02 03 04 05 06 OF 08 09 10 11 12 13 14 15 l 17 le 19 20 21 22 23 Hour 2 Select weekly report Select the date on the calendar to indicate the CPU usage for the week the date falls within For example selecting 9 14 09 indicates the CPU usage record for the week between 9 14 09 and 9 20 09 58 D your future life QNO Technology QnoSniff Professional 2 0 A L CPU Usage Report Type 2009 05 45 MN Jia Mo 1 7 16 16 1 5 1 4 1 4 1 3 1 2 1 2 11 1 0 1 0 E 0 3 0 8 077 07 06 0 5 05 0 4 0 3 0 3 0 2 0 1 0 1 000 0 0 O A MO O A ULA AA 00 E o Aye Value 3 Select monthly report Select the date on the calendar to indicate the CPU usage for the month th
7. 133 192 168 0 103 00 1E 68 C7 A3 62 0 0 253 12 46 2009 00 30 00 06 33 192 168 0 104 00 16 D4 4B 64 03 0 64 0 02 380 49 15 58 2009 09 30 00 06 33 192 168 0 110 00 0D 0B DC 9F 91 0 0 0 0 0 18 33 192 168 0 111 00 90 CC DC 8E 1C al 0 0 3 62 1 93 2009 00 30 00 06 33 192 168 0 111 00 90 CC DC 8E 1C 0 0 33 0 54 2009 09 30 00 06 33 2009 09 30 00 06 2009 09 30 00 06 33 192 168 0 113 00 16 E6 DC 15 19 97 15 183 47 192 168 0 116 0 22 B0 9F 3F D1 i 0 0 LiF 0 06 O d d d d d l dl d d Search rule 1 Date Select the date time range to lookup data time Search rule 2 Select the search filters below IP address username computer name MAC address Search After specifying the search filter click Search button to update the data list E mail Each login account will come with a specific e mail inbox from System and Authorization Management gt User Management that the e mail function can send current page you are viewing in the PDF format Delete Put a checkmark in the box to the left of each entry in the list to set for deletion PDF only available on local If logging in from the PC with QnoSniff Professional installed click on the installation version PDF button to convert the page into a PDF file to be saved on another hard drive or directory 78 D your future life Previous 10 pages Previous page Next page Next 10 pages Go to page _ Every page _ records Data list columns
8. 00 00 46 192 168 2 58 00 23 F8 89 19 05 pink02 2 hotmail com 3911003 Gmail yzu edu tw MSN 2009 09 30 00 01 01 192 168 0 121 MYCHAT 556D79AD anegl0518 peter90132 YAHOO MSG 2009 09 30 00 01 17 192 168 1 219 00 19 DB CB 45 FD wa 315a527 e2000_618 YAHOO MSG 192 168 0 110 00 0D 0B DC 9F 91 jung940002 hotmail com like5399 hotmail com MSN I It2 TES Ivo bho hr O e le A O O O O O O O O O A Search rule 1 Date Select the date time range to lookup data time Search rule 2 Select the search filters below Search rule 3 IP address username computer name MAC address user account peer account IM type 83 D your future life Search E mail Delete PDF only available on local installation version Previous 10 pages Previous page Next page Next 10 pages Go to page _ Every page _ records Data list columns Select All Date time IP address Username Host name MAC Local Account QNO Technology QnoSniff Professional 2 0 After specifying the search filter click Search button to update the data list Each login account will come with a specific e mail inbox from System and Authorization Management gt User Management that the e mail function can send current page you are viewing in the PDF format Put a checkmark in the box to the left of each entry in the list to set for deletion If logging in from the PC with QnoSniff Professional i
9. 5 10 25 33 4D4 1210 64 19 133 A 210 64 12 133 00 23 F8 2C 39 F Anonymous DownLoad version int 0 191 Anonymous DownLoad god crc txtZ 10 602 Anonymous DownLoad god crc txtZ 10 602 Anonymous DownLoad MResource dll 45 568 Anonymous DownLoad R6 rom 37 138 Anonymous DownLoad Table rom 1020 931 Select the date time range to lookup data Select the search filters below IP address username computer name MAC address FTP server FTP account direction file name After specifying the search filter click Search button to update the data list Each login account will come with a specific e mail inbox from System and Authorization Management gt User Management that the e mail function can send current page you are viewing in the PDF format Put a checkmark in the box to the left of each entry in the list to set for deletion If logging in from the PC with QnoSniff Professional installed click on the PDF button to convert the page into a PDF file to be saved on another hard drive or directory 75 D your future life Previous 10 pages Previous page Next page Next 10 pages Go to page _ Every page _ records Data list columns All Date time IP address Username Host name MAC FIP server FTP account Direction File name QNO Technology QnoSniff Professional 2 0 Click this button to jump back 10 pages For example if you are at 201st data entry with 10 entri
10. AII Date time IP address Username Host name MAC Upload speed KB S Download speed KB S Uploaded size KB Downloaded size KB QNO Technology QnoSniff Professional 2 0 Click this button to jump back 10 pages For example if you are at 201st data entry with 10 entries shown on each page click on the Previous 10 pages button to jump to the page with the 101st data entry Go to the previous page on the list Go to the next page on the list Click this button to jump forward 10 pages For example if you are at 1st data entry with 10 entries shown on each page click on the Next 10 pages button to jump to the page with the 101st data entry Specify the number of entries shown on each page for 10 30 50 100 entries or use the pull down menu to directly jump to the page number to view Put a checkmark in this box to select all entries on this page to be marked for deletion Time and date for the recorded action determined as P2P upload download Intranet IP address for the recorded action determined as P2P upload download Intranet username for the recorded action determined as P2P upload download Intranet computer name or MAC address for the recorded action determined as P2P upload download Average upload speed for the recorded action determined as P2P upload download Average download speed for the recorded action determined as P2P upload download Uploaded data size for the recorded acti
11. For example if the IP address of PC with QnoSniff installation is 192 168 1 100 and the remote access port is 80 set the communication port as HTTP TCP 80 80 internal IP address as 192 168 1 100 port location to Any and add to the enabled list Click OK for the changes to take effect 32 D your future life QNO Technology QnoSniff Professional 2 0 Port Range Forwarding Internal IP Address Interface Enabled Update the Application HTTP TCP 80 80 gt 192_ 168 1 200 gt Any Delete selected item Add Please note 1 If your remote access port is not listed in the pull down menu of existing service ports on the router it needs to be added to the router Service Port Management 2 If you need to assign a specific WAN IP for remote access and not from all WAN connections choose the WAN IP interface instead of Any for the port location 3 If the remote access port for QnoSniff is already in use by another router e g the remote management port for the router is also port 80 these two ports can not be the same one and should be changed After configuring the remote access port in the program PC firewall or antivirus software and router test the remote access connection by logging into the web interface of QnoSniff Professional from a remote host Check the WAN IP address from the router homepage 33 D FA Pa I FF CINC a B SH Soe your future life QNO Tech
12. IM conversation will popup as shown below Ge Onoesnilf x 0 B O S 1 iff Distributed Network Monitoring 2009 09 29 20 30 18 hi test 2009 09 29 20 30 31 ukl test 2009 09 29 20 30 47 hil test 2009 09 29 20 30 56 ukl test 2009 09 29 20 31 14 hig test once 2009 09 29 20 31 23 ukl test 2009 09 29 20 31 39 ok thank you 2009 09 29 20 31 47 bye The account info will be shown in the grayed out portion in the example above The data can be sorted by the individual columns of date time IP address username host name MAC address IM type or logs 85 D your future life QNO Technology QnoSniff Professional 2 0 IX Statistics This chapter includes the traffic statistics function supported by QnoSniff Professional including traffic report department traffic ranking list user traffic ranking list The intranet user and application data can be presented by department communication protocol and within a custom time period The bandwidth report and charts will be updated every 15 minutes with new statistics data and will not change within the 15 minute period 9 1 Statistic report This report includes the statistical data and charts for traffic data of various communication protocols From the Traffic Flow list at the left select Total to show the statistics and percentage from total traffic flow for each individual communication protocol within the specified time period The icon is displayed at the
13. address for Telnet remote login Address Destination address or domain name for Telnet remote login Date time Time and date for the Telnet login record Content Telnet login information Encoding Switch between Traditional Chinese Simplified Chinese and UTF 8 82 D your future life QNO Technology QnoSniff Professional 2 0 8 7 IM information QnoSniff Professional supports the following applications for monitoring and logging 1 MSN Live Message 8 5 8 0 2 QQ the user QQ account password must be entered into Basic Setup gt Service Setup gt IM QQ number to be able to monitor and log the chatting contents However not all TM versions of QQ can be monitored 3 Yahoo Message 4 Google Talk Instant Messenger Information Search Rule 3 DZ Mail _ 3 Delete Previous 10 Pages Previous Page goto page every page has 10 7 rows Next Page Next 10 Pages Data Time IP Address User Name Host Name MAC Local Account Peer Account IM Type z z o a 2009 09 29 23 59 58 192 168 1 219 00 19 DB CB 45 FD wa_3153527 jill79212 YAHOO MSG 2009 09 29 23 59 58 192 168 2 123 LV 4294E77A94B0 snoop 31836 bmwbmw4 YAHOO MSG 2009 09 29 23 59 59 192 168 2 95 00 1 4 92 C9 06 DB _elliothuang asd951411 YAHOO MSG 2009 09 30 00 00 16 192 168 1 159 00 16 E6 4B 4A 7C show5717082 lovelove8086 YAHOO MSG 2009 09 30 00 00 45 192 168 0 232 NKMU 7024BA1D02 vivng342001G hotmail com machel75 7 2Qhotmail com MSN 2009 09 30
14. for special indirect derivative loss or any type of loss in the lawsuit caused by usage or information on the file no matter the lawsuit is related to agreement omission or other tort 5 Other Clauses 5 1 The potency of this Agreement is over any other verbal or written record The invalidation of part or whole of any clause does not affect the potency of other clauses 5 2 The power of interpretation potency and dispute are applicable for the law of Taiwan If there is any dissension or dispute between the users and Qno it should be attempted to solve by consultation first If it is not solved by consultation user agrees that the dissension or dispute is brought to trial in the jurisdiction of the court in the location of Qno In Mainland China the China International Economic and Trade Arbitration Commission is the arbitration organization D your future life QNO Technology QnoSniff Professional 2 0 I Introduction OnoSnift Distributed Network Monitoring QnoSniff Professional 2 0 is a network monitoring PC software that can be integrated with QNO routers for network data logging filtering and analyzing Key information of concern to network administrators can be presented in a format that is both easy to access and read It can also output statistical charts and reports for reference to the corporate or network administrators Subjects of interest to the corporate or network administrators What are emplo
15. interface in Qno router port range forwarding page please use the IP address of the WAN when entering the address link of remote login If you selected Any for the interface then any WAN IP can be used for the connection 2 Contents presented by QnoSniff Professional local installation and web remote access version are identical the only difference is in the basic configuration settings Local installation version can change the remote access port and web version cannot Local installation version can change the database path on the hard drive and web version cannot Local installation version can directly output a portion of data to PDF file and web version cannot D your future life QNO Technology QnoSniff Professional 2 0 However the web version can send out e mail with data directly converted into PDF file 36 D your future life QNO Technology QnoSniff Professional 2 0 IV Basic Setup This chapter includes the basic software setup such as database path directory storage device and restrictions etc Basic configuration includes three sub menus 1 Interface configuration 2 Database management 3 Service configuration Interface Configuration p service Configuration The interface configuration is included in the previous chapter Database management 37 DataBase Database Storage Path Database Reserve for Database Storage Type
16. right hand side After selecting the time period and the communication protocol click on the Search button to update the information 86 D your future life QNO Technology QnoSniff Professional 2 0 Statistic Report Report daily sj 2009 09 29 k Protocol FIP Email Http IM P2P TELNET OTHER If the single communication protocol is selected e g e mail instead of Total the traffic flow list at the left will change into the x y chart with traffic flow vs each time period If daily report is selected the chart is presented in 1 hour increments between 0 23 hours if weekly report is selected the chart is presented in 6 hour increments up to 7 days if monthly report is selected the chart is presented in daily increments from 1st to 30th or 31st 87 D your future life QNO Technology QnoSniff Professional 2 0 Statistic Traffic Report Report Type 2009 09 30 ler esteem Email w P Search DX Mail jo A I OM oo an a O 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Pe 00 01 02 03 04 05 06 OF 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 Max 5 22 Min 0 Avs 0 3 Total 7 12 E mail PDF only available on local installation version functions are applicable to the traffic flow statistic lists for direct conversion of the report chart into PDF file or directly e mailing the PDF file to the administrator 88 D your future life QNO Technology QnoSniff Professional 2 0
17. with installation Port 80 is also used by other applications and therefore is the target of computer virus and worm attacks which may conflict with the web service It is recommended to use another port e g 8080 7 Customer Information Please enter your user name and company name on the customer info page Both 10 D ONO your future life QNO Technology QnoSniff Professional 2 0 fields must be filled in to be able to click Next to continue with installation Onosmitf InstallShield Wizard Customer Information Please enter pour information Please enter pour name and the name of the company for which you work User Mame pO Company Name pO InstallShield Cancel 11 D ze ina fe QNO Technology QnoSniff Professional 2 0 8 Setup Type Choose the installation type Select All to install all programs select Custom to choose which programs to install The screenshot below indicates the All installation type Currently there is no difference between All and Custom installation types in QnoSniff Professional 2 0 Select one to continue A InstallShield Wizard Setup Type Select the setup type to install Please select a setup type All program features will be installed Requires the most disk space Select which program features you want installed Recommended hor advanced users 12 D FE gt AAA p S i LAS I u ES J your future life QNO Tec
18. 0 232 NKMU 7024BA1D02 0 02 0 28 13 192 168 2 89 00 22 15 6E E4 C6 0 02 0 28 14 192 168 0 108 00 16 E6 49 DF D4 0 01 0 14 15 192 168 0 191 00 14 85 2B 83 AD 0 01 0 14 16 192 168 0 249 00 14 93 92 EF 55 0 01 0 14 89 D your future life QNO Technology QnoSniff Professional 2 0 9 3 User ranking User ranking is sorted by traffic flow for intranet users You can also choose time period department and communication protocol to view different user ranking User Traffic Ranking Search DX Mail No IP Address User Name Host Name MAC Flux MB Percent 1 192 168 2 87 00 1C 25 3C 0F 02 6971 38 2 17 2 192 168 2 121 00 1E 68 BD 75 F6 2448 11 EE 1 79 3 192 168 2 84 00 23 54 42 32 1E 2421 66 E 7 10 4 192 168 0 158 00 24 1D 64 56 09 1172 45 i 3 73 5 192 168 2 74 00 14 4D 8B 37 5F 835 39 l 2 72 6 192 168 0 145 TEST 3AA7748DFB 847 39 2 70 7 192 168 1 8 00 1F D0 86 CF CB 723 98 2 30 8 192 168 1 194 00 21 85 38 5B Al 666 62 2 12 192 168 1 159 00 16 E6 4B 4A 7C 587 99 87 10 192 168 1 80 HOLLINGS 8D5E04 529 55 1 68 11 192 168 1 32 FU PC 456 72 45 12 192 168 2 151 ANGEL ACEC62065 397 19 26 13 192 168 1 169 00 16 36 26 21 E8 367 47 1 17 14 192 168 1 178 00 24 81 6B 1E 31 357 77 14 15 192 168 1 185 00 16 D4 4B 46 70 349 4 1 11 16 192 168 0 115 00 24 8C 52 81 DF 341 4 1 09 Access to the page for the first time will rank the traffic by users and for all communication protocol
19. 217 23 3 Guest Select the date time range to lookup data Select the search filters below IP address username computer name MAC address website IP address website name Telnet account After specifying the search filter click Search button to update the data list Each login account will come with a specific e mail inbox from System and Authorization Management gt User Management that the e mail function can send current page you are viewing in the PDF format Put a checkmark in the box to the left of each entry in the list to set for deletion 80 D your future life PDF only available on local installation version Previous 10 pages Previous page Next page Next 10 pages Go to page _ Every page _ records Data list columns All Date time IP address Username Host name MAC Website IP address Address Telnet account QNO Technology QnoSniff Professional 2 0 If logging in from the PC with QnoSniff Professional installed click on the PDF button to convert the page into a PDF file to be saved on another hard drive or directory Click this button to jump back 10 pages For example if you are at 201st data entry with 10 entries shown on each page click on the Previous 10 pages button to jump to the page with the 101st data entry Go to the previous page on the list Go to the next page on the list Click this button to jump forward 10 pages For example if y
20. 6 0 08 09 10 11 12 13 14 15 l 17 le 19 20 21 22 23 Hour Selection of time period is identical with the CPU usage and can be customized to review the router memory 62 D your future life QNO Technology QnoSniff Professional 2 0 usage within different time periods 7 3 WAN Traffic WAN traffic includes upstream and downstream data You can select the specific WAN interface to monitor and display the traffic flow 63 D your future life QNO Technology QnoSniff Professional 2 0 WAN Traffic Record 2009 09 29 e B WAN UpStean WAN DownStream wanl v wand wan v wand v wand wand wan wand WANT WAM WAN3 WAN WANE VARI TT WAN WANE 0 5 un E m x E E D 10 00 Unit Hour The average max min traffic data within the designated time period for the selected WAN interface will be shown at the bottom 64 D your future life QNO Technology QnoSniff Professional 2 0 VIII Summary Core functions of QnoSniff Professional Monitoring and logging of communication protocols Communication protocols supported by QnoSniff Professional include the following 1 Web browsing HTTP 2 e mail SMTP and POP3 3 File transfer FTP 4 Point to point downlad P2P 5 TELNET 6 Instant messaging IM In the following section we will introduce the monitoring and logging features for various services and traffic data 65 D you
21. Disk Space Alert when lest then Emai File Size Limitation FTF File Size Limitation M TP Server Account Password Email Subject QNO Technology QnoSniff Professional 2 0 COnos nitty b w i wa Month Select U for continously data collection Overwrite when exceeding Stop receiving and storing when exceeding MBE alert user admin 00 2048 MB bW ME 1 10MB Not record if exceeding hr mh wa ME 1 1UME Not record if exceeding M Open EMAIL ALERT end to super user maxleneth 60 escri donan com Port 7 ee EmailBox imaxleneth 50 Description Database Storage Path Default installation path is on the hard drive partition as the QnoSniff Professional program To change the database path directory please click on the Browse button at the lower right and browse to the desired directory in the popup window 38 D your future life Database reserved for QNO Technology QnoSniff Professional 2 0 EE My Computer EE Do Ey E E H E BBE Be Database size will increase along with time Make sure there is sufficient hard drive space to allow the database to grow Database retention period can be set to 1 6 months Two actions can be configured for database entries past the retention period Overwrite when exceeding New entry will overwrite the old entry Old database entries will not be archived and therefore used hard drive space w
22. ET E RE ete ve ee EEEE E T eco AAA 78 As NN 80 APP e re E ER RO REE T A 83 A US ECS oO iii 86 pe ISS ES E OZZIE EZM 86 02 Departmentrankno dodo ia 89 PMS CU Me AM MN tetas 90 your future life QnoSniff Professional 2 0 II D your future life QNO Technology QnoSniff Professional 2 0 Product Manual Using Permit Agreement Product Manual hereafter the Manual Using Permit Agreement hereafter the Agreement is the using permit of the Manual and the relevant rights and obligations between the users and Qno Technology Inc hereafter Qno and is the exclusion to remit or limit the liability of Qno The users who obtain the file of this manual directly or indirectly and users who use the relevant services must obey this Agreement Important Notice Qno would like to remind the users read the clauses of the Agreement before downloading and reading this Manual Unless you accept the clauses of this Agreement please return this Manual and relevant services The downloading or reading of this Manual is regarded as accepting this Agreement and the restriction of clauses in this Agreement 1 Statement of Intellectual Property Any text and corresponding combination diagram interface design printing materials or electronic file are protected by copyright of our country clauses of international copyright and other regulations of intellectual property When the user copies the Manual this statement of intellectua
23. Name MAC 2009 09 29 19 32 33 199 169 1100 00 1F C6 7B tes001 NB97Q08 edit B Delete 2009 09 29 19 32 44 192 168 1 1 00 0E A0 50 tes002 00 0E 40 50 Edit Delete The first timestamp for monitoring is when the user is added to the list and the monitoring option is set to Yes 55 ONO your future life QNO Technology QnoSniff Professional 2 0 VII System Resource and Analysis This chapter includes the router information as monitored by the QnoSniff Professional enabled PC including CPU usage memory usage and upstream downstream data for each WAN interface on the router 7 1 CPU usage Regardless of the CPU usage memory usage or WAN traffic flow on the router the SNMP function must be enabled on the router in order for QnoSniff Professional to correctly capture the information Go to the router management page System Tool gt SNMP and make sure that SNMP is enabled System Tool Password Diagnostic Firmware Upgrade setting Backup system Recover License Key SNMP Enabled TT pewna a en ly Genea Return to the system resource page of QnoSniff Professional The left hand side of the CPU usage page 56 D your future life QNO Technology QnoSniff Professional 2 0 shows the daily report weekly report monthly report and custom report The calendar is shown on the right 2009 09 29 w September 2009 Sun Mon Tue Wed Thu Fri 1 2 3 4 5 B oo dE E HEH R
24. OK after selecting the language to go to the QnoSniff Professional AP control panel O QnoSniff Please Select Languge N S n ff Distributed Network Monitoring X Basic Configuration Privilege Configuration User Group Management ew system resource analysis W Traffic Information Statistic Information 0 Exit The system time login IP and login ID are shown at the top left corner the language selection menu is at the top right corner 60 QnoSniff BA O X 0 No S I tf Distributed Network Monitoring The main menu to the left side includes 7 items 29 t your future life QNO Technology QnoSniff Professional 2 0 ae Basic Configuration 85 Privilege Configuration E 4 dee User Group Management 1 A Ge system resource analysis M Traffic Information ono er meee ee gee statistic Information C Exit To properly use QnoSniff functions the basic configuration must be first setup 60 QnoSniff f A gt OC Server Time 2009 9 29 EF 10 04 30 AOJR ORIGEGEGE LODO OE K Basic Configuration gt Interface Configuration Basic Configuration gt Database Management Interface Configuration gt Service Configuration Privilege Configuration 3 Please Select Interface eee User Group Management A AA O See ea SA Interface Information DJ yste M resource ay ralysis W Traffic Information Device Account A Statistic Information 0 Exit Device Password
25. Professional e g C QnoSniff CJ QnoSnifF to view the database files saved in the directory as shown below db php QnoSniff_AP gnosniff_web temp If QnoSniff Professional is reinstalled at a later time to the same directory path these database files can still be linked to the QnoSniff Professional control panel for viewing and filtered search If the database files are no longer needed the entire QnoSniff directory can be deleted to free up available hard drive space 96
26. YCHAT C1963F Tp TW NEWS YAHO0 COM 202 43 215 28 MY 1963 2009 09 28 16 56 44 192 168 0 190 YCHAT C1963F erp www PTS ORG TW 61 67 73 13 MY 3 2009 09 28 16 56 44 192 168 0 190 pa ICHAT C1963F Tp ZH TW FXFEEDS MOZILLA COM 63 245 209 93 2009 09 28 16 56 45 192 168 0 188 ee TP 2009 09 28 16 56 46 192 168 0 188 00 1D 7D 08 D3 6 z MSTATIC AK FBCDN NET 203 69 113 26 02687923841 CHANNEL3S FACEBOOK COM 69 63 178 128 Search Rule 1 Select the date time range to lookup data Date Time Search Rule 2 Search Select the search filters below Rule 3 IP address user name computer name MAC address website address Please note If all three of the search filters are specified for the real time status and the communication protocol lists the search result must match all three filter criteria if only two are specified both of the search filters must be matched if only one is specified then only the single search filter must be matched Search After specifying the search filter click Search button to update the data list E mail Each login account will come with a specific e mail inbox from System and authorization management gt Privilege configuration that the e mail function can send current page you are viewing in the PDF format 68 D your future life QNO Technology QnoSniff Professional 2 0 Delete PDF only available on local installation version Previous 10 p
27. accumulated during this time QnoSniff Professional database will also not have any data and therefore the statistic data will not be available for during this time period Right click on the system tray icon to show the context menu Information Login System Enable Disable Auto Exit Monitor 1 Information QnoSniff Professional copyright info NIC being monitored QnoSniff Professional software version and the current storage data size 2 Login System Click on this to successfully login to QnoSniff Professional control panel 3 Enable Disable Auto Enable or disable automatic launch of QnoSniff Professional in the background with system boot up If this option is enabled for the first time QnoSniff Professional will automatically launch at the next system restart 4 Exit Monitor Quit and completely shut down QnoSniff Professional including the data gathering function 91 gt your future life QNO Technology QnoSniff Professional 2 0 QnoSniff Professional will ask again if you wish to shut down the entire QnoSniff Professional program click OK and the shut down procedure will begin The system tray icon will go away after 10 15 seconds and the QnoSniff Professional program is terminated Notification gt Do you want to Exit QnoSniff ow 92 D your future life QNO Technology QnoSniff Professional 2 0 XI Uninstall QnoSniff Professional To uninstall QnoSniff Professional go t
28. age will be shown if connection is successful as well as the trial registered version of QnoSniff Professional as below Pita lechia Rake Network adapter Realtek ETLS16915110 Family Gigabit Ett Interface Information IF 192 108 1200 Mac 00 1F C6 B 04 E Device Account l eH Device Password Connecton stats 6 Remote access configuration QnoSniff supports remote web access and the communication port must be first configured to enable this feature System default is port 80 or you can change the port to match specific requirements Click OK to save the changes In addition to the communication port used by the program the 31 D your future life QNO Technology QnoSniff Professional 2 0 firewall and antivirus software on your PC must also be configured to open up the port for remote access to take effect The router must also be configured to recognize the remote access port as shown below 1 Go to the router setup page select Advanced setup gt DMZ Forwarding gt Port Range Forwarding Advanced Function IS I mn m We rW a GIL Inbound Load Balance LIPnP Routing One to One NAT DDNS MAC Clone E Bulletin and ARP 2 In the port range forwarding page assign the communication port you configured for remote access in QnoSniff Professional to the PC with QnoSniff Professional installed
29. ages Previous page Next page Next 10 pages Go to page _ Every page _ records Data list columns Date time IP address Username Host name MAC Website Website IP Address Put a checkmark in the box to the left of each entry in the list to set for deletion If logging in from the PC with QnoSniff Professional installed click on the PDF button to convert the page into a PDF file to be saved on another hard drive or directory Click this button to jump back 10 pages For example if you are at 201st data entry with 10 entries shown on each page click on the Previous 10 pages button to jump to the page with the 101st data entry Go to the previous page on the list Go to the next page on the list Click this button to jump forward 10 pages For example if you are at 1st data entry with 10 entries shown on each page click on the Next 10 pages button to jump to the page with the 101st data entry Specify the number of entries shown on each page for 10 30 50 100 entries or use the pull down menu to directly jump to the page number to view User access timestamp User IP Name of user Name or MAC address of the user s computer the MAC address will be shown if the computer name cannot be resolved Name of website the user visited The IP address of the website the user visited 69 D your future life Record QNO Technology QnoSniff Professional 2 0 Number of times the website is visite
30. all CinoS nf Command Console on your Computer WARNING This computer program is protected by copyright law and international treaties Unauthorized duplication or distribution of this program or any portion of it may result in severe civil ar criminal penalties and will be prosecuted to the maximum extent possible under the law Cancel Click Next to continue with installation 21 AAA o Y i git i gt M Li BY j aa A M Nemo LS B your future life i Onosmif Command Console Confirm Installation QNO Technology QnoSniff Professional 2 0 The installer i ready to install QnoSniff Command Console on your computer Click Next to start the installation Cancel Back Confirm installation of QnoSniff Command Console and click Next to continue 22 D n m i dl your future life QNO Technology QnoSniff Professional 2 0 i Onosmif Command Console Installation Complete QnoSnitt Command Console has been successfully installed Click Close to exit Please use Windows Update to check for any critical updates to the NET Framework 16 QnoSniff Local Install Complete After all components and applications are installed please click Close at the Installation Complete page to exit 23 AS ONO your future life QNO Technology QnoSniff Professional 2 0 Onosoitt InstallShield Wizard InstallShield Wizard Complete The InstallShield wizard has su
31. ccessfully installed Ornos nitt Click Finish to exit the wizard Finish Cancel Please click Finish to complete QnoSniff Professional installation 24 A ONO your future life QNO Technology QnoSniff Professional 2 0 lll Using QnoSniff Professional This chapter includes steps on how to use QnoSniff Professional and the router settings 3 1 Router settings before using QnoSniff Before using QnoSniff Professional QnoSniff license key option on the router must be enabled for both trial and official versions Please login to the setup page of the router English e Logout WAN Status E WAN 4 Home 0 0 0 0 NetWork 0 0 0 0 0 0 0 0 Qos o IPIDHCP o Firewall Advanced Function Dyndns Disabled Dyndns Disabled Dyndns Disabled Dyndns Disabled system Tool 3322 Disabled 3322 Disabled 3322 Disabled 3322 Disabled Dtdns Disabled Dtdns Disabled Dtdns Disabled Dtdns Disabled Port Management Gnoddns Disabled Gnoddns Disabled Gnoddns Disabled Gnoddns Disabled Log D rules set l Ramma l EEMEW Physical Port Status 1 2 3 4 Enabled Enabled Enabled Enabled Connect Enabled Go to System Tool gt License Key 25 D your future life QNO Technology QnoSniff Professional 2 0 System Tool Password Diagnostic Firmware Upgrade Setting Backup SNMP system Recover License Key Current Time 2009 09 29 _ NIP Server Trial version Official Version Regis
32. cord Next Page IP Address 192 168 0 162 192 168 0 213 192 168 0 117 192 168 0 117 192 168 0 117 192 168 0 117 User Name Host Name MAC 00 23 F8 2C 39 F 9 00 14 4D 81 D6 F5 00 1C 25 33 4D 4 D 00 1C 25 33 4D 4 D 00 1C 25 33 4D 4 D 00 1C 25 33 4D 4 D 00 23 F8 2C 39 F FTP Server 61 220 58 43 210 64 12 1 210 64 12 133 210 64 12 133 210 64 12 133 210 64 12 1 67 PSearch EX Mail FTP Account Anonymous Anonymous Anonymous Anonymous Anonymous Anonymous File Name Encoding BIG5 Ng J Delete Next 10 Pages Direction DownLoad DownLoad DownLoad DownLoad DownLoad DownLoad File Size K File Name B version ini 0 191 god crc txtZ 10 602 god crc txtZ MiResource dil R rom Table rom D your future life QNO Technology QnoSniff Professional 2 0 8 2 Web information Web browsing is the web page browsing history of the user and the http communication protocol is being monitored Web Browsing Information Search Rule 3 Po PX Mail Delete Previous 10 Pages Previous Page A page every page has 10 rows Next Page Next 10 Pages Date Time IP Address User Name Host Name MAC Website Website IP Address Record 4 ry 41747 2009 09 28 16 56 42 192 168 1 62 a AEK HTTP TW BOOKMARKS YAHOO COM 209 131 36 250 TP 2009 09 28 16 56 42 192 168 2 138 00 15 F2 41 E0 CO HTTP 89 202 157 227 89 202 157 227 MY 3 2009 09 28 16 56 43 192 168 0 190 a
33. d increments by 1 count every 15 minutes Please note Even if the website domain name is the same e g tw yahoo com the different corresponding IP address will count towards a separate data entry The user visit count for a single website will increment by 1 every 15 minutes In other words all visits to the same website including the domain name and full web address within the 15 minutes will count as 1 visit 70 D your future life QNO Technology QnoSniff Professional 2 0 8 3 E mail information The user e mail records are monitored by the standard SMPT and POP3 communication protocols Email Information Search Rule 1 Date 2009 0901 fgj2oos 1o 19 4 serchRue2 1 Address y m P Search Host Mama MA Size K Gelect Date Time IP Address User Name c Sender Receiver Subject B Downloading Content lt chunkvsp4 faloe v era bodensee de gt C c lt vocativesanl fal Tisha Hyatt lt Tish o bodensee de 2000 09 29 23 4 1520947 00 16 36 16 1 i io sparinglys lalo Rolex replica watche de a Karn e C 1 49 192 168 0 241 D 5 a e il not Gale 77 off 6 23 Outlook Open Eg Content rg TANONMUSEUMS OTEA lt zeleucid76fialoe ve ra bodensee de gt cpa pyrush aloe vera b 7 Z nag agsg Hollie Chu lt Hollie 3 PRERE O pers 254 192 168 0 247 eae chouAmbrose wiki lt scclux aonat gt gt s9 Cutlcck Open 1 4 media org gt WALCIEE UU a OL E A RZE N lt xilouris f alessandr wt ae on
34. down menu Specify whether the user is to be monitored and when all users have been configured checkmark All and click Save to finish This completes the grouping monitoring username setup for intranet users in one single process If any user information is missing in the window popup click the Refresh button to run the learning process again Please note Users that have been setup and added to the user list will not appear in the IP MAC learning list If the user IP address is changed after being added to the list the original MAC address will be used to automatically update the new IP address for the existing user 53 ONO your future life QNO Technology QnoSniff Professional 2 0 IF Address 00 0E 40 50 00 00 192 168 1 1 00 0E 40 50 00 00 NE97008 1921681100 00 1F C6 7B 84 BD Refresh User list added Please note IP MAC automatic learning process is based on the ARP inquiries sent to all user computers within the same subnet of the intranet network If your intranet PC is behind a firewall the user information might not be detectable by QnoSniff Professional 54 ONO your future life QNO Technology QnoSniff Professional 2 0 User List A chen U User Name test003 S Faddes 102 155 1 100 a Sales 1 test02 MAC 00 1F C6 7B 54 BD Department others e Monitor IP MAC Leaming M startup Monitor No Department Monitor IF Addres MAC User Name Host Edit Time
35. e date falls within For example selecting 20099 29 indicates the CPU usage record for the month of September 2009 59 D your future life QNO Technology QnoSniff Professional 2 0 A L CPU Usage Report Type 2009 05 45 MN a Ba Ca a Lad DH AA o 1 4 1 6 1 5 1 5 1 4 1 4 1 3 1 3 1 2 1 1 1 1 1 0 1 0 0 9 0 0 a DF 0 7 0 6 0 5 0 5 0 4 0 4 0 3 0 2 Oe 0 1 0 1 0 0 0 0 De A AO A e 12344 6 7a A IDI1L12151415 1617161920 21 2225 24 25 202720 29530 Date Aye Value 6 4 Select custom report Select a period of time for data lookup between 2 two calendar months in 24 hr format up to 32 days The custom search criteria non default will require longer processing time to present the data 60 D your future life QNO Technology QnoSniff Professional 2 0 CPU Usage ate 2009 09 19 00 00 PB 2009 09 29 e 23 00 w Please note Please click the Search button after selecting the time period from above As the data will only be updated when the page is first loaded please click the Search button again if the time period has been changed The local installation version supports PDF and e mail functions and the web version supports e mail function only 61 D your future life QNO Technology QnoSniff Professional 2 0 7 2 Memory usage This indicates the system memory usage on the router presented in percentage Memory Usage j UO O1 02 03 04 05 0
36. es shown on each page click on the Previous 10 pages button to jump to the page with the 101st data entry Go to the previous page on the list Go to the next page on the list Click this button to jump forward 10 pages For example if you are at 1st data entry with 10 entries shown on each page click on the Next 10 pages button to jump to the page with the 101st data entry Specify the number of entries shown on each page for 10 30 50 100 entries or use the pull down menu to directly jump to the page number to view Put a checkmark in this box to select all entries on this page to be marked for deletion Time and date of the FTP upload download record Intranet IP address of the FTP upload download record Intranet username of the FTP upload download record Intranet computer name or MAC address of the FTP upload download record FTP server IP address of the FTP upload download record FTP login account of the FTP upload download record Direction upload or download of the FTP upload download record Name of target file of the FTP upload download record Click on the hyperlink to save or directly open the file with the designated program Please note If the Basic Setup gt Database management gt File size limit has been set e g 10MB target files for FTP upload download larger than the size limit cannot be completely archived to the database The database will only archive up to the preset size limi
37. figured file size Therefore attachments may be partially cut away and cannot be properly opened but the file name will be retained After enabling this function the system will send out an e mail to notify the administrator when the remaining storage space is lower than the designated capacity In addition the e mail report function on each page must also be forwarded through this SMTP Server If the SMTP Server is not correctly configured the e mail report function cannot be used OS Please enter the domain of the SMTP Server e g ms12 hinet net Port Communication port for outgoing e mail e g 25 Account E mail account e g tony chen 40 D your future life QNO Technology QnoSniff Professional 2 0 Password E mail password EmalBox E mail address e g tony chen ms12 hinet net Email subject E mail subject 41 ONO your future life QNO Technology QnoSniff Professional 2 0 Service Configuration Configure the account for QQ IM monitoring based on the http web visits logging mode HTTP specific website configuration requires detailed records of the website and IP address QnoSniff Professional by default only logs the main domain address for http website web page visits For example the domain http tw yahoo com will be logged but pages under the domain will not be shown and will only be logged as tw yahoo com Websites that you need to be assigned for full de
38. g data collected by QnoSniff Professional are mostly based on communication protocols access edit permission and chart outputs are based on the logging data of various protocols Please note Access edit permission for each communication protocol is as specified in the Summary Info communication protocol detailed list The chart outputs will also be sorted by the communication protocol but the individual access permissions cannot be set They can only be set to All for the data and charts for access edit permission settings Access permission for each communication protocol and statistic chart N A Cannot read and cannot edit the user control options will not be shown Read The data can only be viewed and cannot be deleted modified the e mail PDF buttons cannot be used Edit The data can be viewed deleted and e mail PDF function can be used Click this option after filling in the account info the New user added message will popup and the new entry will be added to the list below To modify the existing account please click the Edit button to the right of the list entry The contents will appear in the fields above ready for modification Please click Edit after the contents are modified the Add button will change to Edit under editing mode and the system will prompt if you wish to modify the entry Click OK 45 D your future life QNO Technology QnoSniff Professional 2 0 to complete the m
39. greement m PEE Please review the license terms before installing WinPcap 4 0 2 Copyright c 1999 2005 NetGroup Politecnico di Torino Italy Copyright c 2005 2007 C CE Technologies Davis California All rights reserved Redistribution and use in source and binary forms with or without modification are permitted provided that the following conditions are met 1 Redistributions of source code must retain the above copyright notice this list of conditions and the following disclaimer 12 Redistributions in binary form must reproduce the above copyright notice this list of conditions and the following disclaimer in the documentation and or other materials Nullsoft Install system 92 16 After a few seconds the Completing WinPcap installation complete screen will be shown 18 ONO your future life QNO Technology QnoSniff Professional 2 0 5 WinPcap 4 0 2 Setup Completing the WinPcap 4 0 2 Setup Wizard WinPcap 4 0 2 has been installed on your computer Click Finish to close this wizard Click Finish to continue installing other components 12 Apache Successfully Registered After WinPcap is installed the Apache registration process will follow with the successful message RegSvr32 o DilRegisterServer TE C Windows NamePipeCom dll ART SS Please click OK to continue installing other components 19 AAA i lt gt i git i gt M Li BY j aa A M Nem
40. he menu in the upper right side for English Traditional Chinese Simplified Chinese 12 D your future life QNO Technology QnoSniff Professional 2 0 Language English v From adbse0129 yahoo com tw BEEEGO BFTE EFH m A lt healthgo yahoo com tw Subject RE Tdfiasf _ formfi EEGO f RTNAAH12 09 9 14 EIEGO BEFE BEES SR lt healthgo yahoo com tw gt 338 Content Content button opens the e mail with the built in application of QnoSniff Professional and therefore can only be displayed in pure text format The attachment filename will only be shown and cannot be opened or saved This method is more suitable for quickly viewing e mail messages with pure text contents The upper right menu can be used to select between Traditional Chinese Simplified Chinese and UTF 8 encoding to display the e mail contents If your message is displayed in random characters due to a different character encoding used please switch to another language type 73 R a zk j gt i i your future life QNO Technology QnoSniff Professional 2 0 2 hitp 192 168 4 129 Traffic_Info EmailDetail_client php time 2009 09 29 23 47 494ip 192 168 0 Wi X E hito 192 168 4 129 Qno Sniff Distributed Network Monitoring rece ti o w E Rolex replica watches Hot Sale 77 off Send Address rationmuseums org gt Send Host IP f 92 168 0 247 PER chunkvspdfWaloe vera bodensee de gt Cc l
41. hnology QnoSniff Professional 2 0 9 Destination Location The system default is C QnoSniff or click Change to change the installation directory Click Next to continue to the begin installation page K i a aa ae jtd Jno nifi InstallShield Wizard Choose Destination Location Select folder where setup will install files Install Anos riff to C 0no5 nitt Cancel 10 Ready to Installation Enter the procedure for the main program of QnoSniff Web version Please click Install to begin 13 ONO your future life QNO Technology QnoSniff Professional 2 0 Jno miff InstallShield Wizard Heady to Install the Program The wizard i ready to begin installation Click Install to begin the installation IF you want to review or change any of your installation settings click Back Click Cancel to exit the wizard Cancel Installing 14 D F e F A a NY E U B AP pS J your future life QNO Technology QnoSniff Professional 2 0 Onosoitt InstallShield Wizard Setup Status Anos5 nf configuring your new zo tware Installation Installing EA Agnosniff ap setup CHA Crystal epot LHR edist2005_ 86 m i 11 WinPcap Setup The WinPcap component will be installed next If your PC already has WinPcap installed and is newer than the version included with QnoSniff Professional package the warning message will popup to not
42. ifications for QnoSniff Professional 1 Intel P4 2 0GHz and faster AMD CPU in the same class Operating system Windows platform excluding Windows 2000 and older At least 100G free hard drive space At least 2GB System RAM gt e NM Required setup 1 QNO router with mirror port support NIC and Ethernet cable on the QnoSniff host PC to connect to the mirror port on the QNO router Mirror port on the router must be enabled SNMP on the router must be enabled m ae oe a gt QnoSniff license key option on the router must be enabled for both trial and official versions 2 2 Required components during QnoSniff Professional installation QnoSniff installation package includes all necessary components for proper operation of QnoSniff However ii these components are already installed on your computer they may need to be uninstalled or reinstalled upgraded to the latest version Apache Server WinPcap Net Framework PHP ONO your future life QNO Technology QnoSniff Professional 2 0 2 3 Example topology for system distribution P2P IM Moritor fe Mula SD 849 System Statistics Traffic QQ Resource Report Statistics w ww w amp ge O7 LAN Users Ono QnoSniff 2 0 Topology 2 4 Begin installation Please refer to the following steps when installing the software on your PC 1 Insert the QnoSniff Professional CD into the CD drive on your computer 2 Click on Install F
43. ify the user that WinPcap installation will be skipped WinPcap 4 0 2 Setup x A newer version of WinPcap intemal version 4 1 0 1452 is already installed on this machine The installation will be aborted If your PC does not have WinPcap installed the installation will continue if you have an older version installed on your PC the installation will first uninstall the existing WinPcap application before installing the newer version 15 AS ONO your future life QNO Technology QnoSniff Professional 2 0 5 WinPcap 4 0 2 Setup Pe fel ES l WinPcap 4 0 2 Installer In ap Welcome to the WinPcap 4 0 2 Installation Wizard a This product is brought to you by L lt CACE TECHNOLOGIES Packet Capturing and Network Analysis Solutions Nullsoft Install system v2 16 Please click Next to continue with WinPcap installation 16 ONO your future life QNO Technology QnoSniff Professional 2 0 5 WinPcap 4 0 2 Setup Welcome to the WinPcap 4 0 2 Setup Wizard This Wizard will guide you through the entire WinPcap installation For more information or support please visit the WinPcap home page http jjv winpcap org Cancel Please carefully read through the WinPcap license agreement and then click Agree to continue with WinPcap installation 17 N ONO your future life QNO Technology QnoSniff Professional 2 0 WinPcap 4 0 2 Setup FA EJ ES License A
44. iles to begin installation Note The system requires highest administrator privileges for installation 3 Language Selection To begin the installation procedure first select the language to use at the language selection page AS ONO your future life QNO Technology QnoSniff Professional 2 0 QnoSniff InstallShield Wizard Choose Setup Language Select the language for the installation from the choices below Chinese Simplified Chinese Traditional Click Next to continue with installation or click Cancel to cancel the installation procedure 4 Welcome Page On the welcome page click Next to continue with installation or click Cancel to cancel the installation procedure ONO your future life QNO Technology QnoSniff Professional 2 0 QnoSniff InstallShield Wizard Welcome to the InstallShield Wizard for Unos nitt The InstallShield wizard will install Anos nift on your computer To continue click Next 5 License Agreement Please carefully read through the agreement and click I accept the terms of the license agreement then click Next to continue with installation OnoSnitt InstallShield Wizard License Agreement Pleaze read the following license agreement carefully QroSnitf Copyright ATTENTION THIS GNOSNIFF PROGRAM HERAFTRE CALLED PROGRAMS I5 PROVIDED UNDER THE FOLLOWING LICENSE AGREMENT HERA FTRE CALLED gt lt LICENSES WHICH DEFINES WHAT YOU Ma
45. ill not be increased o Stop receiving and storing when exceeding New entries will not be received nor saved and old database entries will not be deleted The retention period must be reconfigured or reset in order to start D your future life Remaining capacity warning Enable E mail alert QNO Technology QnoSniff Professional 2 0 collecting and saving new data If you do not want the database to be interrupted and do not wish to delete old entries please choose 0 months for the retention period to indicate that the database will not be stopped 1 Size detection and warning for remaining hard drive space When the remaining hard drive space for database storage is lower than___ MB 200 2048MB notify the administrator 2 E mail file size limitation To prevent excessive e mail data quickly taking up and wasting storage space the e mail record size can be restricted to 1 10 MB If the total e mail data including attachments exceeds the size limitation the e mail will still be recorded up to the configured data size Therefore attachments may be partially cut away and cannot be properly opened but the file name will be retained 3 FTP file size limitation To prevent excessive FTP data quickly taking up and wasting storage space the FTP file size can be restricted to 1 10 MB If the FTP file both uploaded and downloaded exceeds the size limitation the FTP transaction will still be saved up to the con
46. ional system administrator and users in addition to system logs 5 1 Privilege Configuration Privilege configuration can be applied to a specific account type logging into QnoSniff Professional systems that restricts the account s access to system logs and charts for different communication protocols Database Accessment Protocol Privilege Configu ation Privilege Tope Wiew Privilege administrators Privilege type Edit Privilege Members CHART TELNET P2P IM HTTP EMAIL FTP CHART TELNET P2P IM HTTP EMAIL FTP Edit A CHART TELNET P2P IM HTTP EMAIL FTP CHART TELNET P2P IM HTTP EMAIL FTP Enter the name for the level of account that you wish to assign for example Common User while the administrator account has the highest level of authorization The default is set to read edit permissions to all logs and charts for all communication protocols but cannot be modified or deleted 44 D your future life Communication protocol Privilege configuration Add Edit QNO Technology QnoSniff Professional 2 0 Please note that there are 5 levels of system authorizations from high to low administrator admin user defineuser and self defined Newly added accounts are self defined and have the lowest authorization level compared to the other four types When modifying the account type the user will only be able to change their own and the lower authorization account levels As the loggin
47. k the Clear button to delete all logs _ _ page _ records page Customize the number of entries on each page and directly jump to another page User Log Recard Page Log Time Administrator account Administrator IF address Status information 2009 09 29 09 47 41 administrator 1270 01 Login success 2009 09 29 09 49 40 Logout success 2009 09 29 09 51 31 Login success 2009 09 29 17 44 17 Update Member who Dept ID is null 2009 09 29 17 44 17 Update Member who Dept ID is null 2009 09 29 17 44 17 Update Member who Dept_ID is null 2009 09 29 17 44 47 Modify Interface Confifuration BESS 2009 09 29 17 45 10 Update Member who Dept ID is null 2009 09 29 17 45 10 Update Member who Dept_ID is null 2009 09 29 17 45 10 Update Member who Dept_ID is null 49 D ONO your future life QNO Technology QnoSniff Professional 2 0 VI User Group Configuration This chapter includes the group management in QnoSniff Professional User groups are convenient in centralized management as we would not need to set each user one by one and changes can be applied to all users within the group You can also assign groups based on the network usage situations and take advantage of QnoSniff Professional to better match the behaviors of intranet users 6 1 Department Setup Group Configuration Department Name Description Monitor Vos ae Protocol M FTP M Emai M HTTP m Ml BZ M TELNET dd Department Wane Descriptio
48. l property must also be copied and indicated Otherwise Qno regards it as tort and relevant duty will be prosecuted as well 2 Scope of Authority of Manual The user may install use display and read this Manual on the complete set of computer 3 User Notice If users obey the law and this Agreement they may use this Manual in accordance with Agreement If the users violate the Agreement Qno will terminate the using authority and destroy the copy of this Manual The hardcopy or softcopy of this Manual is restricted using for information non commercial and personal purpose Besides it is not allowed to copy or announce on any network computer Furthermore it is not allowed to disseminate on any media It is not allowed to modify any part of the file Using for other purposes is prohibited by law and it may cause serious civil and criminal punishment The transgressor will receive the accusation possibly 4 Legal Liability and Exclusion 4 1 Qno will check the mistake of the texts and diagrams with all strength However Qno distributors and resellers do not bear any liability for direct or indirect economic loss data loss or other corresponding commercial loss to the user or relevant personnel due to the possible omission 4 2 In order to protect the autonomy of the business development and adjustment of Qno Qno reserves D your future life QNO Technology QnoSniff Professional 2 0 the right to adjust
49. n Monitor Members Edit Department name Name for the specific department e g Sales RD Description Brief description and notes on the department for identification 50 D your future life Monitor Protocol Add Edit Cancel QNO Technology QnoSniff Professional 2 0 Monitoring and logging for the department Departments will be monitored and logged by QnoSniff Professional on the specified communication protocols To disable monitoring or if the department uses confidential information e g higher management e mail or IM messages the exception items can be selected Click this option after filling in the account info the New user added message will popup and the new entry will be added to the list below To modify the existing account please click the Edit button to the right of the list entry The contents will appear in the fields above ready for modification Please click Edit after the contents are modified the Add button will change to Edit under editing mode and the system will prompt if you wish to modify the entry Click OK to complete the modification This will clear the data fields you have entered or cancel the modification action 51 D ONO your future life QNO Technology QnoSniff Professional 2 0 6 2 User List The user list is for expanding the user groups and users The users to be monitored by QnoSniff Professional must be added into the user list User Li
50. n to jump back 10 pages For example if you are at 201st data entry with 10 entries shown on each page click on the Previous 10 pages button to jump to the page with the 101st data entry Go to the previous page on the list Go to the next page on the list Click this button to jump forward 10 pages For example if you are at ist data entry with 10 entries shown on each page click on the Next 10 pages button to jump to the page with the 101st data entry Specify the number of entries shown on each page for 10 30 50 100 entries or use the pull down menu to directly jump to the page number to view Timestamp for the e mail Sender recipient IP address for the e mail Sender recipient username for the e mail Sender recipient computer name or MAC address for the e mail the MAC address will be shown if the computer name cannot be resolved sender of e mail Recipient of e mail Subject of e mail Size of e mail including body and attachments Outlook Open button is used to open e mail messages with Outlook or Windows Mail The e mail can be first downloaded and saved to the local drive then opened in Outlook to open save the attachment file Please note If remotely logged in from the web or directly opening the e mail by clicking Outlook Open the mail will be displayed in the default html application The example below uses Firefox to directly open and display the e mail message Select the language encoding from t
51. nd for receiving the e mail notification Default system language as Traditional Chinese Simplified Chinese or English after the user is logged in Click this option after filling in the account info the New user added message will popup and the new entry will be added to the list below To modify the existing account please click the Edit button to the right of the list entry The contents will appear in the fields above ready for modification Please click Edit after the contents are modified the Add button will change to Edit under editing mode and the system will prompt if you wish to modify the entry Click OK to complete the modification This will clear the data fields you have entered or cancel the modification action By default the preset administrator and admin login accounts include dummy e mail addresses Please remember to change to valid e mail addresses to be able to receive the e mail notification and report 48 ONO your future life QNO Technology QnoSniff Professional 2 0 5 3 User log User logs will show all user login logout and modification information etc Only the administrator and admin level users on QnoSniff Professional will see the user log list after logging in Other user levels will not be able to see the user logs PDF Converts the logs into PDF file for archiving or reference Please click the PDF button to export Clear If the logs are no longer needed clic
52. net cable is plugged into the mirror port on the router and connected to the NIC of PC with QnoSniff Professional installed 2d D your future life QNO Technology QnoSniff Professional 2 0 3 2 Launching QnoSniff Professional After the router is configured to support the QnoSniff Professional please logon to the PC with QnoSniff Professional installed Click on the desktop icon to launch QnoSniff Professional Windows Security Alert To help protect your computer Windows Firewall has blocked some features of this program Do you want to keep blocking this program Name QnoSniff Publisher Ono Keep Blocking Unblock Ask Me Later Windows Firewall has blocked this program from accepting connections from the Internet or a network If you recognize the program or trust the publisher you can unblock it when should unblock a program If your firewall or antivirus is enabled please add the QnoSniff application to the exception list unblock before activating QnoSniff Professional This will ensure proper connection and operation for QnoSniff Professional The login screen below will be shown kal Account ROEE K PI WE Please Select Languge w Cance D your future life QNO Technology QnoSniff Professional 2 0 Default account is administrator lower case Default password is admin lower case Language selection Traditional Chinese Simplified Chinese English Click
53. nology QnoSniff Professional 2 0 ______ mterface WANT 192 168 4 1 192 168 5 120 192 168 5 21 3 0 U Dyndns Disabled 3322 Disabled Dtdns Disabled Qinoddns Disabled O rules set In the example above enter hitp 192 168 4 1 16 80 in the address bar of the browser the port number is at the end after the colon If the configuration and connection are both correct the login page will be shown a Password ENEE Please Select Language Apply Cancel Default account is administrator lower case Default password is admin lower case Language selection Traditional Chinese 34 a a 3 your future life QNO Technology QnoSniff Professional 2 0 Simplified Chinese English Click OK after selecting the language to go to the QnoSniff Professional Web control panel English y D Server Time 2009 09 29 PM 07 06 22 a7 EN Basic Configuration af A m 4 Basic Configuration gt Interface Configuration gt Database Management gt Service Configuration Interface Configuration ES Privilege Configuration EEEO Eni Network adapter Realtek RTL8169 8110 Family Gigabit Ethernet NIC Microsoft s Pac E KEK User Group Management Interface Information Jp 1192 168 1 100 VETO 00 1F C6 7B 5A BD a Device Account i Connection Status Tnal Version Traffic Information Cancel y Statistic Information Exit Please note 1 If you enter a specific WAN
54. nstalled click on the PDF button to convert the page into a PDF file to be saved on another hard drive or directory Click this button to jump back 10 pages For example if you are at 201st data entry with 10 entries shown on each page click on the Previous 10 pages button to jump to the page with the 101st data entry Go to the previous page on the list Go to the next page on the list Click this button to jump forward 10 pages For example if you are at 1st data entry with 10 entries shown on each page click on the Next 10 pages button to jump to the page with the 101st data entry Specify the number of entries shown on each page for 10 30 50 100 entries or use the pull down menu to directly jump to the page number you wish to view Put a checkmark in this box to select all entries on this page to be marked for deletion Timestamp of the specific IM conversation Intranet IP address for the specific IM conversation Username for the specific IM conversation Computer name for the specific IM conversation User account on the IP computer listed above for the specific IM conversation 84 gt your future life QNO Technology QnoSniff Professional 2 0 Peer account The peer account for the specific IM conversation IM type IM type of either MSN QQ YahooMessage or Google Talk Record The total number of messages to from for the specific IM conversation Click on the number hyperlink and the detailed
55. o your future life QNO Technology QnoSniff Professional 2 0 13 Launch Apache Service After the component is registered the Apache service will launch If a built in or antivirus firewall is enabled on your PC you will be asked to grant the service access through the firewall Please select Allow or Unblock for the service If the service is already blocked by the antivirus software or firewall please add the service to the exception list Windows Security Alert E J To help protect your computer Windows Firewall has blocked some features of this program Do you want to keep blocking this program Name Apache HTTP Server Publisher Apache Software Foundation Keep Blocking Unblock Ask Me Later Windows Firewall has blocked this program from accepting connections from the Internet or a network If you recognize the program or trust the publisher you can unblock it when should unblock a program 14 Install Net Framework 2 0 If your PC already has Net Framework installed this step will be skipped if not the Net Framework 2 0 will be installed 20 D your future life QNO Technology QnoSniff Professional 2 0 15 Install QnoSniff Professional Local The location installation main application of QnoSniff Professional will be installed next i Onosmif Command Console Welcome to the Inosnif Command Console setup Wizard The installer will guide pon through the steps required to inst
56. o Programs and find the QnoSniff directory Click on Uninstall CQnosniff 2 Uninstall under the directory as shown to the right to begin the uninstall procedure Alternatively go to Control Panel gt Add remove Programs and select QnoSniff to initiate the uninstall shield WinPcap will first be uninstalled as shown below This step might be skipped if uninstalling from the Control Panel but the components will be fully uninstalled using both methods WinPcap 4 0 2 Uninstall E x gt Uninstall WinPcap 4 0 2 gt iV cap Remove WinPcap 4 0 2 from your computer WinPcap 4 0 2 will be uninstalled from the following folder Click Uninstall to start the uninstallation Uninstalling from C Program Files WinPcap Mullsort Install System v2 16 cous Click Uninstall to uninstall the WinPcap component and the completed screen is as below Click Finish to continue with uninstall and the popup window will ask if you wish to uninstall the main program Click Yes to continue 93 ONO your future life QNO Technology QnoSniff Professional 2 0 Windows Installer Are you sure you want to uninstall this product Collecting information for uninstallation process QnoSniff Command Console AAC Cancel The software maintenance screen will popup as below please select the Remove R option and click Next 94 8 ONO your future life QNO Technology QnoSniff Pr
57. odification Cancel This will clear the data fields you have entered or cancel the modification action 46 your future life QNO Technology QnoSniff Professional 2 0 5 2 User Management After configuring the privilege level you can add new accounts to each of the privilege levels as specified in Privilege Configuration The User Management accounts are the account password language settings that users use to login to the system Similarly based on the registered account level the user will only be able to modify their own account information as well as add new or modify accounts with lower authorization levels The highest level administrator can add other administrator level accounts while non administrator users cannot use this function User Managerment Account Password Re Eey Password Privilege Email Langvage Account Privilege Type Edit z Account Enter the account name for login Password Enter the login password for this account Re key password Enter the same password for confirmation Privilege Choose the account level from the pull down menu Default levels include administrator admin user and define user Newly added or modified account levels will also show up in this pull down menu for selection 47 D your future life E mail Language Add Edit Cancel Please note QNO Technology QnoSniff Professional 2 0 Enter the e mail address for the account a
58. ofessional 2 0 OnoSniff InstallShield Wizard Welcome Modify repair or remove the program Welcome to the Unos nf Setup Maintenance program This program lets you modify the current installation Click one of the options below Modify Select new program features to add or select currently installed features to remove Reinstall all program features installed by the previous setup Remove all Installed features InstallShield Click Yes to confirm and begin the uninstall process for the main program OnoSniff InstallShield Wizard Do vou want to completely remove the selected application and all of its features am 0 After the uninstall process is finished the popup window will ask if you want to restart the system If there are other incomplete tasks that are not saved you can choose to restart later Or the system can be restarted immediately if there are no other concerns Please note that the uninstall procedure will be complete after the system has restarted 95 ONO your future life QNO Technology QnoSniff Professional 2 0 Jno miff InstallShield Wizard Maintenance Complete InstallShield Wizard has finished performing maintenance operations on QroSriff 0 Mo I will restart my computer later Remove any disks rom ther dives and then click Finish to complete setup Back Cancel After the system has restarted please locate the previous install path for QnoSniff
59. on determined as P2P upload download Downloaded data size for the recorded action determined as P2P upload download 79 D your future life 8 6 Telnet information QNO Technology QnoSniff Professional 2 0 QnoSniff Professional supports the standard Telnet communication protocol QnoSniff Professional currently does not support non standard nor encrypted protocols e g Telnet connection through other communication ports or SSH connections Telnet BBS Information Search Rule 1 Date Search Rule 2 IP Address Y 12009 09 01 2009 10 19 Fie Pe P Search Z Wail Delete Previous 10 Pages Previous Page A page every page has 10 vy rows Next Page Next 10 Pages Data Time IP Address 2009 09 29 23 52 16 192 168 2 88 2009 09 29 23 52 27 192 168 0 129 2009 09 29 23 53 01 192 168 0 138 2009 09 29 23 55 08 192 168 1 155 2009 09 29 23 55 39 192 168 2 58 2009 09 29 23 55 42 192 168 2 164 2009 09 29 23 58 42 192 168 2 164 O O O O O O O O a Search rule 1 Date time Search rule 2 Search rule 3 Search E mail Delete User Name Host Name MAC Server IP Server Name Telnet Account Content 00 19 DB B6 30 62 140 112 172 11 140 112 172 11 Guest USER 163 15 154 173 163 15 154 173 Guest PC253163054224 163 15 154 173 163 15 154 173 Guest AKEN PC 140 112 172 11 140 112 172 11 Guest 00 23 F8 89 19 05 140 112 172 11 140 112 172 11 Guest 00 0A E4 30 29 91 68 180 217 9 68 180 217 9 Guest 00 0A E4 30 29 91 68 180
60. or terminate the software Manual any time without informing the users There will be no further notice regarding the product upgrade or change of technical specification If it is necessary the change or termination will be announced in the relevant block of the Qno website 4 3 All the set parameters are examples and they are for reference only You may also purpose your opinion or suggestion We will take it as reference and they may be amended in the next version 4 4 This Manual explains the configuration of all functions for the products of the same series The actual functions of the product may vary with the model Therefore some functions may not be found on the product you purchased 4 5 Qno reserves the right to change the file content of this Manual and the Manual content may not be updated instantly To know more about the updated information of the product please visit Qno official website 4 6 Qno and or distributors hereby declares that no liability will be born for any guarantee and condition of the corresponding information The guarantee and condition include tacit guarantee and condition about marketability suitability for special purposes ownership and non infringement The name of the companies and products mentioned may be the trademark of the owners Qno and or the distributors do not provide the product or software of any third party company Under any circumstance Qno and or distributors bear no liability
61. ou are at 1st data entry with 10 entries shown on each page click on the Next 10 pages button to jump to the page with the 101st data entry Specify the number of entries shown on each page for 10 30 50 100 entries or use the pull down menu to directly jump to the page number you wish to view Put a checkmark in this box to select all entries on this page to be marked for deletion Time of Telnet record Intranet IP address for the specific Telnet record Intranet username for the specific Telnet record Intranet computer name or MAC address for the specific Telnet record Destination IP address for the specific Telnet record Destination address or domain name for the specific Telnet record Login account for the specific Telnet record Detailed contents for the specific Telnet record click this button to show the information below 81 D your future life QNO Technology QnoSniff Professional 2 0 2 hitp 192 168 4 129 Traffic_Info TelnetContentDetail_client php 2009 09 29 23 55 3941192 168 2 Windows Internet Ex E hitp 192 168 4 129 Traftic_Info TelnetContentDetail_chent php 2009 09 29 23 55 3941192 168 2 58400 23 F8 89 19 0 RA Distributed Network Monitoring Server IP Server Name Data Time Encoding PTI 140 112 172 11 P zwi gi diii E xV DLEE cc XV x rr Rzwwi F jt VX F XZWWW A zwr ww iiiiihhgqffeeddcch XVW ii ihhqqffeedcb TT ELL EVA Website IP address Destination IP
62. r future life QNO Technology QnoSniff Professional 2 0 8 1 Real time Status The real time status includes network traffic for all users on the same day therefore the data will only be accumulated for one single day Logging into the page the next day will present you with the intranet user traffic data for the next day Real Time Traffic Status Select Department Goto MRA 1Page Every Page Has Rows Refresh BX Mail No User Name Host Name MAC Department FIP EMAIL TELNET Monitor Start Time 0 0 192 168 1 100 2009 10 19 16 11 24 1 test001 NB97008 others 0 0 0 0 192 168 1 1 2009 10 19 16 13 37 2 test002 00 0E A0 50 00 00 Sales This list contains the following traffic data for different communication protocol of each user including instant messaging logs web page browsing FTP e mail records Telnet logs and traffic flow bandwidth ratio The hyperlink is available for each communication protocol that links to the detailed records for the individual user as shown below using FTP as example 66 D your future life QNO Technology QnoSniff Professional 2 0 ie File Transfer Information Search Rule 1 Date from 2009 09 01 fies 2009 10 19 is Search Rule 2 Search Rule 3 Date Time 2009 09 29 23 49 22 2009 09 30 00 00 40 2009 09 30 00 23 17 2009 09 30 00 23 18 2009 09 30 00 23 19 2009 09 30 00 23 19 IP Address Previous 10 Pages Previous Page Go ToM page Every Page MURRA Re
63. s including the actual traffic flow MB and the percentage To view another selection or another communication protocol use the pull down menu at the right to filter the results Please remember to click the Start Analysis button to update the results with the new search filter 90 D your future life QNO Technology QnoSniff Professional 2 0 X Logout After using QnoSniff Professional click Logout menu to quit the control panel main page Logging out from a remote session will quit the web page However logging out from the PC with QnoSniff Professional local installation version will quit from the control panel main page while the QnoSniff Professional icon will still be running in the system tray at the lower right corner QnoSniff Professional is running in the background gathering data green icon indicates connected to the router gray icon indicates disconnection with the router To completely shut down QnoSniff Professional including the data gathering function right click on the system tray icon and select Exit Monitor from the context menu QnoSniff Professional will ask again if you wish to shut down the entire QnoSniff Professional program click OK and the shut down procedure will begin The system tray icon will go away after 10 15 seconds and the QnoSniff Professional program is terminated Please note If QnoSniff Professional is completely shut down including the data gathering function no data will be
64. st User Name E Group Department IP Address MAC Department Monitor startup Monitor fe ee ees Department Monitor Tae Username Enter the name of the user e g SalesPC1 IP address Enter the IP address of the user e g 192 168 3 100 Either manually or from the pull down menu of automatically learned list of IP MAC Enter the MAC address of the user e g 00 1A B6 02 3F 9A please note the format with spacing Department Select the preset group to add the user from the pull down menu 52 D your future life Monitor IP MAC learning QNO Technology QnoSniff Professional 2 0 Monitoring for this single user Please note that even if the user belongs to a group that is currently being monitored setting the monitoring option for this single user to No no monitoring will exclude the user from monitoring This setting is applied to a single user only If the intranet user list is readily available then it can be manually entered into the system but will still require time and labor QnoSniff Professional includes the IP MAC automatic learning tool that can easily do the job for you Click the IP MAC learning button and another window will popup to display the intranet user information QnoSniff Professional automatically obtained including the computer name or the MAC address will be shown IP address and MAC address The username can be filled in and the department can be selected from the pull
65. t the original file size will still be displayed in the file size column and therefore attempts to open the file may fail due to this size limit resulting in an incomplete file 76 D your future life File size KB QNO Technology QnoSniff Professional 2 0 Size of target of the FTP upload download record Please note The database will only save the FTP files up to this size limit and discards the excess data However the original file size will be saved for calculating the actual bandwidth flow 17 D your future life QNO Technology QnoSniff Professional 2 0 8 5 P2P information QnoSniff Professional supports monitoring and logging for common P2P sharing programs and can determine the transmission protocol and bandwidth flow used by these P2P programs QnoSniff Professional may include further updates for identifying various P2P software and transmission protocols P2P Traffic Information Search Rule 1 Date From 2009 0 9 01 Mm 2009 1 0 13 ja Search Search Rule 2 IP Address v EMail Delete Previous 10 Pages Previous Page Goto 1 Every Page Has 10 Rows Next Page Next 10 Pages A i a SERA E Upload Size KB Download Size KB 35 192 163 0 4 Fi 0 01 0 01 1 15 9 34 2009 00 30 00 06 33 192 163 0 5 08 00 27 16 B 7 67 0 03 0 0 26 41 0 0 2009 09 30 00 06 192 168 0 6 08 00 27 67 0E D4 0 03 0 0 25 67 0 0 2009 09 30 00 06 IP Address User Name Host Name AAC 2009 09 30 00 06 33 33 33
66. t vocativesanl aloe vera bodens esz Wonderful t mepieces at affordable pr ces Hot deal s that you cannot m ss outthe latest trends and fas h on in stockhttn blackfeet blushtemp com Content 74 D your future life QNO Technology QnoSniff Professional 2 0 8 4 FTP information File transfer in QnoSniff Professional refers to the standard FTP protocol including active and passive modes Other encrypted type file transfer protocols e g SFTP FTPS FTPES etc are not supported by QnoSniff Professional and cannot be monitored File Transfer Information Search Rule 1 Date IP Address Y Search Rule 2 Search Rule 3 2009 0901 m2009 10 19 E Po PSearch File Name Encoding DIGS Y BX Mail E Delete Previous 10 Pages Previous Page Go TA page Every Page MURRA Record Next Page Next 10 Pages Date Time IP Address 2009 09 29 23 49 22 192 168 0 162 2009 09 30 00 00 40 192 168 0213 2009 09 30 00 23 17 192 168 0 117 2009 09 30 00 23 18 192 168 0 117 2009 09 30 00 23 19 192 168 0 117 2009 09 30 00 23 19 192 168 0 117 Search rule 1 Time Search rule 2 Search rule 3 Search E mail Delete PDF only available on local installation version File Size K B Host Name MAC User Name FIP Server FTP Account Direction File Name 00 23 F8 2C 39 00 25 F8 20 39 F 61 220 58 43 RAE 210 64 12 133 REA 210 64 12 133 00 1C 25 33 A 210 64 12 133 00 1C 25 33
67. tailed logging must be included as Website for detailed logging IP to log the full link address For example http tw news yahoo com article url d a 09091 1 1 7 1qwgx html Enter the main domain name for full detailed logging in the Website IP field click Add and then Save for the changes to take effect Service Contiguration Htto specially appointed website Configuration Weed the detail record website TF do To Page Everypaze 0 Recon WA No Need the detail record website TP IM QQ number 42 ONO your future life QNO Technology QnoSniff Professional 2 0 THO Confieuration OO Humber OO Password User Name Within 20 limit bytes Go To 0 Page Every page i0 el No User Name LI Number QnoSniff Professional supports QQ specific monitoring among IM applications The QQ accounts and passwords to be monitored must be entered into the system for monitoring and logging of QQ message Enter the QQ account password to be monitored into the blank fields click Add and then Save for the changes to take effect For example enter the following information into the blank fields in order QQ account is 12355639 with password 34568989 and the user ID is Sales1 then click Add then Save to take effect 43 ONO your future life QNO Technology QnoSniff Professional 2 0 V System and Authorization Management This chapter includes the login accounts for QnoSniff Profess
68. tration time status And Information Renee There are two options 1 Trial Click the Trial button to begin the 15 day trial period After 15 days QnoSniff Professional will stop functioning and the service will not be available Please purchase and register the product license key if you would like to continue using QnoSniff Professional Enter your license key and click Submit to resume using QnoSniff Professional registered 2 Purchase and register the license key If you do not require the trial period and wish to immediately activate QnoSniff Professional please purchase and register the product license key Enter your correct license key and click Submit to immediately register and activate QnoSniff Professional 26 your future life QNO Technology QnoSniff Professional 2 0 Please note 1 After activating the trial version of QnoSniff Professional the trial period cannot be stopped and will continue to count down 2 If your product license key is entered incorrectly three times the license key page will be locked down completely and will not accept any further attempts Please contact your distributor for related QNO services Enable mirror port Go to port management Port Management Enable mirror port port make sure the port is not disabled and then click OK to save the changes 1 WANA 1001 2 WAN O F 3 WAN O 4 WANA O F an un E Check that the Ether
69. y OO WITH THE PROGRAM AND CONTAINS LIMITATIONS ON WARRANTIES ANDOA REMEDIES THIS LICENSE 15 GRANTED E UNO TECHNOLOGY INC FOR PROGRAM PURCHASED EITHER DIRECTLY OR THROUGH ANY AUTHORISED AGENT OF THE COMPANY IMPORTANT CAREFULLY READ THIS LICENSE BEFORE USING THIS PROGRAM INSTALLING COPYING OR OTHERWISE USING THIS PROGRAM INDICATES YOUR ACKNOWLEDGMENT THAT YOU HAWE READ THIS LICENSE AND AGREE TO ITS TERMS IF YOU DO NOT AGREE RETURN THE COMPLETE PRODUCT TO I do not accept the terms of the license agreement InstallShield D your future life QNO Technology QnoSniff Professional 2 0 6 Apache Setup The Apache Server enables the web service for QnoSniff Professional on the PC for remote monitoring and access by administrators and users At the installation and setup page for Apache Server click Next to continue with installation Apache setup O Please inout Apache s settina Web Server IP Localhost Web Server Name Server ame Listen Port 80 Administrator Email User ame company com lt Back Next gt Cancel Web Server IP is the IP address of the web server the default is Localhost 127 0 0 1 Web Server Name is the name of the web server Listen Port is the communication port used by the Apache Server default is port 80 Administrator Email is the e mail with administrator privileges for notification of important user messages Please click Next after setup to continue
70. yees doing online Most of their time online is spent sending receiving e mail browsing web pages searching for information MSN Skype instant messaging IM with friends using Bittorrent and other P2P file sharing applications Of these e mail and IM are the main channels for information leaks and virus infections P2P applications are also bandwidth killers and breeding grounds for Trojan spyware Furthermore employees waste time on instant messaging and are constantly interrupted during work The amount of wasted productivity at work is difficult to estimate However instant messaging can provide savings on communication costs and improve efficiency which has convinced corporations to open up their networks to IM applications Excessive use of chatting software at work results in reduced work efficiency network bandwidth abuse from downloads network congestion affecting normal applications and leaked confidential information QnoSniff Professional is specifically designed for corporate users with these concerns and management solution for the corporate network is of utmost priority By monitoring and logging network data QnoSniff Professional can assist the administrator in resolving various issues within the corporate network QnoSniff Professional is capable of compiling all internet browsing history e mail records chat logs and even downloaded files into a complete analysis report Administrator can review the organized report easily

User Manual

Contents

Download Pdf Manuals

Related Search

Related Contents