RSS Feed
Knowledgebase : CommView

Currently we know about conflicts with the following programs: SoftIce by Numega: Possible system crashes. PGPNet 7.0 by NAI: A device driver conflict resulting in the Blue Screen of Death under Windows 2000 if PGPNet is bound to the dial-up adapter...
Yes. In fact, the network adapter does not need to be bound to TCP/IP or any other protocol. In a situation where you are troubleshooting a network it might be necessary to be able to plug in the computer running CommView into an available port on a hub. ...
Yes. The only limitation is that promiscuous mode is not available for virtual adapters, so you'll be limited to capturing your own and broadcast packets only.
No, it's safer to close CommView, then change or plug/unplug your card, and restart the program. The adapter list will be automatically updated.
No. We hope that even inexperienced users will find it useful. You don't have to use all of its features. For example, even novices might be interested in having a full picture of Internet and Local Area Network connections to and from their PCs, or findi...
Unlike hubs, switches prevent promiscuous sniffing. In a switched network environment, CommView (or any other packet analyzer) is limited to capturing broadcast and multicast packets and the traffic sent or received by the PC on which CommView is running....
In brief, yes. There are a few methods that can help you solve this problem. For more information and sample network layouts, please refer to our white paper, Promiscuous Monitoring in Ethernet and Wi-Fi Networks.
This happens if you install CommView over a Terminal Services connection. The solution is simple: Reboot the server, and all the network adapters will become available in the CommView's adapter selection box.
I have Windows 2000, and when I uninstall the program, I receive this message: "CommView will now uninstall the drivers. Click "OK" to continue. This can take between 10 and 60 seconds." But then nothing happens!A. This can happen if there are active netw...
The only limitation is that any adapter can be opened by only one user at any given time. In other words, two users (local or remote) cannot capture traffic from the same adapter by running two instances of CommView on the same server.
There are two possible reasons: You either selected an unused network adapter, or you made a mistake when configuring the capturing rules. Turn off the rules and see what happens. In any case, even when the capturing rules are on, the program's status bar...
New Gigabit network adapters have a feature called TCP/UDP/IP "checksum offload", which allows the network adapter to calculate packet checksums, thus increasing the system performance and decreasing CPU utilization. Since CommView intercepts packets befo...
There is a known conflict between WinPcap, the driver used in WireShark and many similar products, and the driver used in CommView. There is a simple workaround: Start capturing packets with WireShark before you start capturing packets with CommView. In t...
No, you can open CommView folder, right-click on the CV.exe file while holding down the Shift key, and select "Run As" from the pop-up menu. Enter the administrative login and password in the window that pops up and click OK to run the program. Under Wind...
Yes, you can use the Open current buffer in new window button on the small toolbar on the Packets tab. This will allow you to make snapshots of the current buffer as many times as you wish, at any intervals. You will then be able to explore the packets i...
Actually, there is no such limitation. The application uses a circular buffer for storing captured packets. By default, the buffer can contain up to 5,000 latest packets, but this value can be adjusted in the Settings window. The maximum buffer size is 20...
Three activities may alert your firewall. First, it may be an attempt to resolve IP addresses to hostnames. Since CommView has to contact your DNS servers to make a DNS query, it inevitably triggers the alarm. You can disable this feature (Settings => Opt...
If your modem has a dual USB/Ethernet interface and you can connect it to an Ethernet card, CommView will certainly capture traffic on it. If it has only a USB interface, the best thing to do is to try.
There are two possible reasons: Either you have a hub that is only labeled as a hub, but inside is a switch (some vendors like Linksys do that), or you have a multi-speed hub, in which case you can't see the traffic from the stations operating at the spee...
CommView and CommView for WiFi use the documented, recommended Windows API function for name resolution: getnameinfo(). This function is not supposed to perform NetBIOS name lookups and doesn't do so under all other Windows version. However, under Windows...
CommView enables the network card's promiscuous mode and can capture network traffic on the local segment of the LAN. In other words, normally it captures and analyzes packets addressed to all of the computers on the segment, not only to the one where the...
It is a packet that neither originates from, nor is destined to the machine running CommView. There could be several hosts on the LAN communicating with each other, so the packets sent between the hosts other than the one running CommView are called pass-...
A packet analyzer is a program (or sometimes, a device) that monitors the data traveling between computers on a network. A packet analyzer is also commonly referred to as a network analyzer, packet decoder, network monitor, protocol decoder, or, more freq...
Typically, this is caused by advanced antivirus software that scans certain types of traffic, such as HTTP, POP3, SMTP, etc. The antivirus installs a driver that intercepts the traffic before it leaves or enters your computer and analyses it for suspiciou...
Sorry, PPP handshaking packets cannot be captured. Note that all other PPP packets that follow the initial handshaking process are captured.
To see text in East Asian languages, you should install East Asian fonts. Open Control Panel => Regional and Language Options, select the "Languages" tab, and check the "Install files for East Asian languages" box.
Check out these sites: Sniffing (network wiretap, sniffer) FAQProtocols.com CommView Tutorial