Return-Path: Received: from fort-point-station.mit.edu by po12.mit.edu (8.9.2/4.7) id PAA11978; Tue, 2 Jan 2001 15:24:13 -0500 (EST) Received: from lists.wildpackets.com (lists.wildpackets.com [192.216.124.33]) by fort-point-station.mit.edu (8.9.2/8.9.2) with SMTP id PAA16906 for ; Tue, 2 Jan 2001 15:24:01 -0500 (EST) Received: from wildpackets.com by lists.wildpackets.com with SMTP; Tue, 2 Jan 2001 11:55:46 -0800 Mime-Version: 1.0 Message-Id: Date: Tue, 2 Jan 2001 11:55:22 -0800 To: "EtherPeek for Windows Maintenance" From: Janice Spampinato Subject: WildPackets JANUARY 2001 Maintenance Mail - WIN Content-Type: text/plain; charset="us-ascii" ; format="flowed" Sender: Precedence: Bulk List-Software: LetterRip Pro 3.0.7 by Fog City Software, Inc. List-Unsubscribe: X-Evolution: 00000032-0000 Dear WildPackets' Product Maintenance Owner: Many thanks for making this our Wildest Year in business by far! The year 2000 saw AG Group transform itself into a new persona - WildPackets, Inc. - and double our business and staff along the way. In the first few weeks of the New Year, we will be making several exciting announcements concerning staff additions, new product releases, and developments relating to our Professional Services and Maintenance offerings. These announcements and the plans we have for 2001 should allow us to once again realize a very prosperous year. We wish the same for you and your organization. For now, as per usual, we are delivering this monthly maintenance email to every current maintenance owner as one of the benefits associated with your maintenance purchase. The complete document has also been posted to the maintenance area on our web site. In this way, you can always have access to the mail if you should lose or erase the email version. The January password to the maintenance area of our web site and to your service folder is "greco". To get to the maintenance area of our web site, see our home page at http://www.wildpackets.com. There is a box in the support section that allows you to login to gain access to Maintenance Mail. Use "service" as the userid and "greco" as the password. The URL to access the service folder is ftp://service:greco@ftp.wildpackets.com/root/service/. If you prefer to use an ftp client to gain access, please log on to ftp.wildpackets.com with the user id "service" and password "greco". This will get you to the root directory and from there you'll be able to access the service folder. ============================================= SECTION 1. ETHERPEEK, TOKENPEEK, AIROPEEK * EtherPeek Version 4.1 * TokenPeek Version 4.1 * New Decoders Included with v4.1 * EtherHelp v4.1 - January Release * AiroPeek Beta RELEASED * WebStats Analysis Module * Napster Plug-in * Internet Attack Plug-in * UPDATED Decoder and Plug-in SDK Updates AVAILABLE * Secure your Network with EtherPeek + iNetTools + CyberWallPLUS SECTION 2. WATCHPOINT * WatchPoint Lite(tm) FREEWARE * WebStats vs. WatchPoint SECTION 3. COMPLEMENTARY TOOLS * NetSense v4.05 * ProConvert v2.31 UPDATE * 10 Cool Things You Can Do With NetDoppler! * PacketScrubber SECTION 4. TRAINING * Santa Clara Training Kicks off 2001 Public Class Schedule * Take our Training Self Assessment Quiz * 2001 Public Class Schedule * Maintenance Owner Training Discount * T.E.N. Video Training Series SECTION 5. MARKETING AND E-COMMERCE * New Demo Download Pages * Wireless White Paper in the works * Maintenance mail now @ http://www.wildpackets.com SECTION 6. INTERNATIONAL NEWS * A Look Back at the year 2000 * Wireless Packet Analysis Anyone? * January Purchase INCENTIVES * WILDPACKETS TRAINING COMING! SECTION 7. TECHNICAL SUPPORT * Q&A - How do I find visitors to my site with WebStats? - EtherPeek v4.1 locking up - How can I print charts with EtherPeek? - How can I interpret Napster Traffic? - Problems locating DLLs needed to install iNetTools * Web-based Technical Support Report Form * Writing your own Decoders and Plug-ins * Net-Troubleshooting Listserv and How to Subscribe * Net-Troubleshooting Searchable Archives * Networking Terms Glossary Available =========================================== SECTION 1. ETHERPEEK & TOKENPEEK =========================================== ETHERPEEK v4.1 If you haven't already upgraded, EtherPeek version 4.1 is ready and waiting for you at: ftp://service:greco@ftp.wildpackets.com/root/service/epw/ THE PASSWORD TO EXTRACT THE EXECUTABLE IS "ayla.lynne". Your current v4.x serial number will launch the application, once extracted. TOKENPEEK v4.1 Registered TokenPeek owners can download the software from the following URL: ftp://service:greco@ftp.wildpackets.com/root/service/tpw/ THE PASSWORD TO EXTRACT THE EXECUTABLE IS "zefram.alan". Your current v4.x serial number will launch the application, once extracted. NEW V4.1 PACKET DECODERS - CHAP - Challenge Handshake Authentication Protocol (RFC 1994) - IGMP - Internet Group Management Protocol v2 (RFC 2236) - ISAKMP - Internet Security Association and Key Management Protocol (RFC 2408) - MGCP - Media Gateway Control Protocol (RFC 2705) - PAP - Password Authentication Protocol (RFC 1334) - PPTP - Point to Point Tunneling Protocol (RFC 2637) - SIP - Session Initiation Protocol (RFC 2543) - SLP - Service Location Protocol (RFC 2608) - H.225 - Call signaling and media stream packetization (RAS) - NDS - NetWare 5 NCP Novell Directory Services - Napster For a complete list of decoders included with EtherPeek, please visit http://www.wildpackets.com/support/knowledge_base/etherpeek_win#1 ETHERHELP V4.1 SHIPPING IN JANUARY The upgraded version of EtherHelp is currently making its way through our QA process and is expected to ship later this month. We'll send you email once we've placed the software in your service folder. AIROPEEK BETA SHIPS In the Fall of 2000, WildPackets announced its intention to produce a comprehensive packet analysis solution to support 802.11b headers and control information as well as other 802.11b-specific features. On December 22, we released the first beta iteration of the software, fulfilling our promise to deliver a version before year's end. A beta version of AiroPeek now resides at: ftp://apwbeta:aroma@ftp.wildpackets.com/root/apwbeta/ The ReadMe that accompanies the application contains important information about the software. PLEASE READ THIS TEXT for installation notes and currently-known issues. NOTE ESPECIALLY that the software does not currently install under Windows NT. We are hoping that many interested parties will spend time with this pre-release version and send us informed feedback on its functionality for your wireless environment. Our intention is to release the software in the first quarter, and we need more real-world testing in order to meet this schedule. Thank you! WEBSTATS ANALYSIS MODULE WebStats, the first in a planned series of Analysis Modules, enables you to use EtherPeek to go beyond packet capture and inspection to analyze the dataflow that represents your internet presence and to acquire vital statistics for the TCP client/server transactions on your network. WebStats, an EtherPeek upgrade option that can be ordered now, requires IE 5.0 or later. Maintenance owners receive a 10% discount from the $595.00 USD SRP. NAPSTER PLUG-IN A new Napster Plug-in with a list of common Napster ports (user-configurable through the Plug-in Options Dialog) is shipping as part of the new EtherPeek v4.1 release. The Plug-in sends informational notifications when it sees Napster login, search, or download packets. It also keeps Summary Stats for those same items (number of logins, searches, and downloads) plus total packets and bytes used by Napster. This is all made more useful by the fact that you can graph or make alarms based on these statistics. So, if you want EtherPeek to tell you who is responsible for putting Napster traffic on your network and provide bandwidth utilization for same, check out this new Plug-in! INTERNET ATTACK PLUG-IN A new Internet Attack Plug-in ships as a standard part of the version 4.1 release of EtherPeek. This Plug-in replaces the LAND Attack and Oversize IP (Ping of Death) Plug-ins that have previously shipped with EtherPeek. NEW DECODER AND PLUG-IN SDKS Updated Decoder and Plug-in SDKs for EtherPeek v4.1 are now available from: ftp://service:greco@ftp.wildpackets.com/root/service/epw/ SECURING YOUR NETWORK WITH ETHERPEEK+iNETTOOLS+CYBERWALLPLUS Network-1 Security Solutions, Inc. and WildPackets are promoting the combined use of EtherPeek and iNetTools with Network-1's CyberwallPLUS suite of security products to provide an all-inclusive solution for securing multi- protocol, internal networks. By combining EtherPeek, iNetTools and CyberwallPLUS, network administrators can: * continuously test and verify network security policies * generate real-time alerts for security breaches * revisit network security and perform regular audits To learn more about CyberWallPLUS, please visit http://www.network-1.com. =========================================== SECTION 2. WATCHPOINT =========================================== WATCHPOINT LITE(tm) FREEWARE READY AND WAITING! WatchPoint Lite, a powerful freeware product that offers real-time web server monitoring, is now shipping. Ideal for small to medium-sized organizations who host their own servers, WatchPoint Lite's in-depth HTTP and FTP analysis and reporting capabilities are borrowed from WildPackets' complete site performance and usage monitoring system, WatchPoint. The freeware version gives businesses a comprehensive view of internet traffic patterns and web site performance, including critical information on visitors, page views, downloads, server performance, network usage and more. WatchPoint Lite Freeware is available from the WildPackets' web site now. To download a copy, please visit http://www.wildpackets.com/demos/. WEBSTATS VS. WATCHPOINT In discussing WebStats and WatchPoint with customers, questions often arise about the differences between the two products. To address these questions, we have created this comparative matrix of the information delivered by each tool. WatchPoint WebStats Analysis Reports X X Summary Stats X Server Comparisons X All Network Statistics X Network Response Times X Server Response Times X X Domains X X Referrers X Referrer Errors X X Error Types X Rejected Connections X X Error Pages X X Top Entry Pages X X Aborted Server/Client Transfers X Status Codes X X Unique IP Addresses X X General Transactions X Transaction Database X By Method Transactions X X Page Hits Per Hour X X Resource Hits Per Hour X X Transactions Per Hour X Configurable Time Windows X Path Tracking X X IP Tracking X Browser Types X X Visitors X Transactions by MIME Type X CGI Variables X Profiles X X WP Export X Multiple Domains Per Server X X Users Security Profiles X X HTML Output X XML Output X CSU Output =========================================== SECTION 3. COMPLEMENTARY TOOLS =========================================== NETSENSE FOR ETHERPEEK/TOKENPEEK v4.05 NetSense version 4.05, a "WildPacket-ized" update release of the software featuring some additional product capability and minor bug fixes, is now shipping. Registered NetSense owners can download from: ftp://netsense:ovid@ftp.wildpackets.com/root/netsense/. Your existing license key will launch the new release. A complete list of product feature additions and fixes is included in the Readme that accompanies the update. If you are not a NetSense Maintenance owner but are interested in becoming one, you can purchase maintenance for one or two years and receive product upgrades and updates as one of your maintenance benefits. NetSense 12-month Extended Maintenance = $125.00 NetSense 24-month Extended Maintenance = $200.00 To order NetSense maintenance, please contact marjorie@wildpackets.com. For those of you new to the product, NetSense analyzes all communications included in an EtherPeek or TokenPeek packet trace, and provides: * ProblemFinder Expert Help System * Rules-based Client/Server Transaction Analysis * Error Packet Analysis * Ethernet Fragment Analysis * Protocol Utilization Maps, Charts and Graphs * Ethernet and Token Ring Problem Analysis * Global Statistics * Top 10 Lists * Network Latency Measurements * Application Throughput Analysis * Visual Packet Displays * A "What If" Feature that allows you to predict application load/response times under varying conditions (different LAN/WAN bandwidth, more). NetSense for EtherPeek/TokenPeek is $476.00 for maintenance owners (SRP $595.00), and can be purchased directly from sales@aggroup.com. NetSense product information, demonstration software, FAQ, and a .PDF version of the NetSense Guide are available from http://www.wildpackets.com/netsense/. PROCONVERT v2.31 - TIMES TWO! ProConvert version 2.31, a minor update release that addresses a slicing problem when writing to tcpdump, is now shipping. Registered ProConvert for EtherPeek/TokenPeek owners can request the new version and password to extract the executable by sending email to marjorie@wildpackets.com. ProConvert - the non-specific edition - is also available for downloading. For those of you who own the product that is not specifically geared for EtherPeek/TokenPeek, please download the new version from: ftp://service:greco@ftp.wildpackets.com/root/service/enhancement-products/ and apply your existing license key to launch the update. For those of you new to the product, ProConvert takes packet traces from a variety of packet analyzers and converts them to/from various file formats, allowing you to view packets captured on a different analyzer with EtherPeek, TokenPeek, NetSense or a variety of other LAN analyzers. FOR A COMPLETE LIST OF THE PACKET FORMATS THAT PROCONVERT IS ABLE TO CONVERT TO/FROM, PLEASE VISIT OUR KNOWLEDGE BASE AT http://www.wildpackets.com/support/knowledge_base/proconvert 10 COOL THINGS YOU CAN DO WITH NETDOPPLER NetDoppler is a powerful, Windows-based utility that performs route discovery, latency tests, and throughput tests to remote hosts. NetDoppler builds a tree of IP nodes representing the packet path and is ready to perform serious testing and baselining from the moment you install it. There's no need for specialized software such as SNMP or remote monitoring agents! To learn more about this unique tool and its capabilities, please visit http://www.wildpackets.com and check out the "10 Cool Things you can do with NetDoppler" link. NetDoppler is available for purchase through the WildPackets' Web Store. The price for the utility is $249 SRP USD. PROTECT YOUR PACKET TRACES WITH PACKETSCRUBBER(TM) PacketScrubber is a new utility that removes sensitive or confidential data from frames within your protocol analyzer's saved trace files. Selected data is changed to "null data" (all zeros) allowing you to send your trace files outside of your organization for analysis or troubleshooting purposes. PacketScrubber contains SmartScrub(tm) technology, allowing you to scrub frames on a selective basis. SmartScrub has the ability to scrub layer by layer and protocol by protocol. If you want to scrub the entire DLC frame, leaving no network layer or higher layer information at all, SmartScrub affords you that capability. If you want to only scrub your file transfers, then SmartScrub allows you to only change FTP packets. For IP packets, you also have the option of translating your IP addresses to the default private class address range (as recommended by RFC 1918) or any address of your choosing. PacketScrubber is now available for purchase through the WildPackets' site. To order, please visit the product pages at http://www.wildpackets.com. The price for the utility is $99 USD, regularly $169 SRP. =========================================== SECTION 4: TRAINING =========================================== JOIN US IN SANTA CLARA FOR THE FIRST WILDPACKETS PUBLIC TRAINING OF 2001! WildPackets' Public training classes enjoyed increasingly large attendance and popularity in 2000. In 2001, we plan to enhance and improve upon our course deliverables and grow the program even more. If you haven't been to one of our well-received packet analysis trainings, please check out our full schedule on our web pages and make plans to attend one (or more!) of our classes soon! The first group of classes in 2001 will take place at the Beverly Heritage Hotel in Milpitas, CA February 5 through 16. WP-100 February 5-6 WP-101 February 7-9 WP-103 February 12-13 WP-104 February 14-16 For a complete list of courses, course descriptions, training schedules, locations and to register, please visit our training pages at http://www.wildpackets.com/training or contact Stephanie Temples, Professional Services Sales Associate, at stephanie@wildpcakets.com. 2001 PUBLIC TRAINING CLASS CALENDAR Santa Clara, CA WP-100, Feb. 5-6 Santa Clara, CA WP-101, Feb. 7-9 Santa Clara, CA WP-103, Feb. 12-13 Santa Clara, CA WP-104, Feb. 14-16 San Diego, CA WP-100, Mar. 5-6 San Diego, CA WP-101, Mar. 7-9 San Diego, CA WP-103, Mar. 12-13 San Diego, CA WP-104, Mar. 14-16 San Francisco, CA WP-100, Apr. 16-17 San Francisco, CA WP-101, Apr. 18-20 San Francisco, CA WP-103, Apr. 23-24 San Francisco, CA WP-104, Apr. 25-27 Boston, MA WP-100, May 14-15 Boston, MA WP-101, May 16-18 Boston, MA WP-103, May 21-22 Boston, MA WP-104, May 23-25 Walnut Creek, CA WP-100, Sept. 10-11 Walnut Creek, CA WP-101, Sept. 12-14 Walnut Creek, CA WP-103, Sept. 17-18 Walnut Creek, CA WP-104, Sept. 19-20 Los Angeles, CA WP-100, Oct. 15-16 Los Angeles, CA WP-101, Oct. 17-19 Los Angeles, CA WP-103, Oct. 22-23 Los Angeles, CA WP-104, Oct. 24-26 Raleigh, NC WP-100, Nov. 5-6 Raleigh, NC WP-101, Nov. 7-9 Raleigh, NC WP-103, Nov. 12-13 Raleigh, NC WP-104, Nov. 14-16 **MAINTENANCE OWNERS RECEIVE A 10% TRAINING DISCOUNT** **************************************************** TAKE OUR TRAINING SELF-ASSESSMENT QUIZ To help determine which WildPackets training class suits your level of experience, we've put together a Self Assessment Quiz which consists of 23 questions broken into 4 sections (one for each class level) that can be downloaded or taken on-line. Please visit to take the quiz, and then let Stephanie Temples (stephanie@wildpackets.com), help you through the registration process for the class (or classes) that will work for you! T.E.N. VIDEO WORKSHOP SERIES WildPackets offers a comprehensive, self-paced, video-based training program geared specifically for the IT Professional. The T.E.N. (Technology, Engineering, Networking) Program has been developed by our training partner, O.E.C., with the intent of providing an in-depth, self-paced training series for those: * new to packet and network analysis needing to understand basic networking and protocol fundamentals before attending a WP Public or on-site class. * wishing to reinforce the education gained from a WP Public or on-site training. * looking for a specific path to understanding foundations of Ethernet and packet analysis technology so as to enhance their troubleshooting and network engineering expertise in a self- paced format. WHO WOULD BENEFIT FROM THIS VIDEO WORKSHOP PROGRAM? * Any Network or IT Professional who uses, or needs to understand, network and protocol analysis in order to do their job. * Education, training and certification entitlements are becoming key factors in attracting and retaining IT talent. This comprehensive program gives a Training, Human Resource or IT Manager the means of providing a variety of convenient and effective methods for delivering in-depth instruction in a cost- and time-effective manner to their IT staff. For a complete outline of the video series content, please visit http://www.wildpackets.com/training/ =========================================== SECTION 5: MARKETING AND E-COMMERCE NEWS =========================================== NEW DEMO DOWNLOAD PAGES WildPackets has now added ProConvert, PacketScrubber and NetDoppler demonstration versions to our newly-designed demo web pages at http://www.wildpackets.com/demos. Please take a look at these new tools that both complement and augment our existing product suite when you have the chance. WIRELESS WHITE PAPER IN THE WORKS WildPackets is developing a White Paper to address the increasing need for wireless LAN analysis which should be available for downloading from our site later this month. The deployment of wireless local-area-networks (WLANs) is rapidly increasing, providing users mobility along with instant and constant connectivity to network resources such as servers, printers, or an Internet connection. As the performance and reliability of wireless networking technology continue to improve and costs continue to decrease, the market is looking to supplant traditional wired connections with the convenience and flexibility of wireless. Cahners In-Stat Group predicts that the Enterprise wireless local- area-network (WLAN) market alone will grow rapidly from $771 million in 1999 to nearly $2.2 billion in 2004 (Wireless LAN Market Analysis, January 2000). As with any network, it is important to be able to identify problems and assess the security, reliability and overall performance of a wireless LAN. AiroPeek, our newly-announced wireless LAN analyzer, will provide all of these facilities and more when released later this quarter. A beta is available now, so that you can begin to familiarize yourself with the capabilities of the tool for your wireless network installations. Please see Section 1 for details on how to download and begin exercising AiroPeek right away. YOUR MONTHLY MAINTENANCE EMAIL ON THE WEB Please visit http://www.wildpackets.com to login and get the latest edition of your monthly maintenance email. Enter "service: for the userid and "greco" for this month's password, and this month's maintenance email contents will be available to you. =========================================== SECTION 6. INTERNATIONAL NEWS =========================================== A LOOK BACK AT THE YEAR 2000 Thanks to you for another great year of business! 2000 will forever be marked for us by the emergence of a stand-out, enthusiastic German Partner, Brainworks, who planned and successfully executed several major trade and road shows that helped us make and solidify our product position in the German marketplace. 2000 also saw the addition of several new partners in Sweden and Italy that should should prove to be major factors in our ever more successful emergence in the European marketplace over the next 12 months. Our long-standing partner in Japan, dit Co., has re-emerged this year as a major factor in our growth by localizing our products for wider acceptance in the Japanese market. Training has been a major factor in our domestic sales success over this past year, and we hope to mirror this success internationally in 2001. Overall, we doubled our staff and sales in 2000, and are on a trajectory to repeat this trend in 2001. With your continued support, we're sure to make it. INCENTIVES FOR JANUARY December bundle incentives are still in effect this month for orders placed through our international partners only. Please take advantage of these offers while they are in effect! Tania Traboulsi (tania@wildpackets.com) can disclose all incentive details and help you process orders. WILDPACKETS, INC. TRAINING GOES GLOBAL! WildPackets is now able to offer our training courses to an international audience with the recent appointment of Horizon-MTS as our training partner-distributor for the European markets. Horizon-MTS is the largest technical training company in the U.K. with offices spanning the pan-European market. They work exclusively in the networking market. Along with training, they will be a distributor for EtherPeek as well. Please check their web site for a further explanation of who they are and what they do. We are pleased to have them join us as one of WildPackets' global team of Partners! =========================================== SECTION 7. TECHNICAL SUPPORT =========================================== TECHNICAL SUPPORT Q&A Q. I have just installed WebStats and like it very much. I want to be able to send the report to each Business Center in our agency to show who is using the internet and where they are going. I like that the websites are listed, but I don't understand who the visitors are to the site. Is there a way to do that? A. The information you are seeking is displayed in EtherPeek in a couple of places. The Summary Statistics page in the Web Server and Web Users sections contains this data, as do the log files (global and capture). There is no way to match the Web User to the Web Server on the Summary Stats page, but in the global or capture logs you can see the URL accessed and the IP address of the station accessing that URL. While there is no built-in way to get this information into a report, it can be imported into other applications for data sorting and manipulation. On a Win 2k machine, the web information is stored in the 'Web.log' file, in common log file format, in the C:\Documents and Settings\\ApplicationData\WildPackets\EtherPeek\WebStats directory. This log contains the URL accessed, the IP address of the station accessing that URL, the timestamp, and the information accessed. Q. I'm having a problem with EtherPeek v4.1 running under Windows 98 using a Farallon NIC and your supplied DEC drivers. Everything runs OK for a while, then it locks up. After restart, EtherPeek takes a long time to come up, and sometimes doesn't seem to come up at all. When I ctl-alt-del to check the running tasks, I'll find "Peek" running, not EtherPeek. After some time (a minute at least), Etherpeek comes up. Is this a known issue? A. We have seen this issue before and fix #1 outlined below should work. "Peek.exe" is the EtherPeek executable, so when you see it in your task manager, EtherPeek is still running. Here are some additional ways to modify the defaults to optimize performance. One approach is to do all of these at once and, if performance is okay, start turning things back on to identify which items are causing the performance hit. Exit EtherPeek before implementing any of these changes. 1) Rename or delete peek.log and names.nam if they are large files** 2) Turn off all plug-ins (via Tools/Plug-ins) 3) Turn off global statistic collection ("background collection") (via Statistics/Collect Global Statistics) 4) Turn off passive name resolution (via Tools/Name Resolver Options...) 5) Limit packet size (via File/Open/Capture Buffer Options/Limit each packet to... whatever minimum you can and still have packet details you need. 6) Be sure that Scroll during Capture is off (View menu). ** You can search your file system to find peek.log and names.nam, as their locations will vary depending on OS and installation directories. Under Win98 they are typically found under...windows/application data. Q. I am running EtherPeek v4.0.2 and am not able to print my charts as they are displayed on the screen without doing some manipulation to get around that problem. My question is, will v4.1 allow me to print what these charts directly via the print command? A. The problem you are experiencing printing the graphs is a known issue in EtherPeek when run under Windows 9.x OS. This problem has not been resolved in version 4.1, but we are working on it. Our work around for this problem is to select the chart you want to print by clicking somewhere on the chart to make sure it's the active window. Then click on Edit/Copy from the menu. Launch and paste the chart into your favorite graphics capable application. Q. I have been trying to decipher the information provided by the new Napster Plug-in that comes with EtherPeek v4.1. While I see counts for Napster total stats, I see none in all other Napster fields. What does this mean, and how might I filter for or capture the device(s) that are responsible for Napster traffic? A. The Napster Plugin searches for activity on the ports that Napster tends to use. However, this is not a guarantee of Napster activity. It only means that there is some kind of traffic on those ports. To catch this traffic, set up an advanced filter. Go to the Filters tab, click the new filter button (top left), name it, and select advanced. Click And/Plugin/Napster. This will create a Napster filter. Run the capture and you will see only those users that are Napster suspects. Remember, this will only mean that there is port traffic from those users which may or may not be Napster. Q. Having installed iNetTools, the program is unable to locate IPHLPAPI.DLL. The file does not exist on the C: drive where both EtherPeek and iNetTools are installed. A. The problem you're experiencing is most likely due to the use of older versions of Winsock or Internet Explorer. iNetTools requires Winsock 2 to install. If you don't have Winsock 2, it is available for download from All the necessary DLLs should be installed if you are using I.E. 5.1 SP1 or above. If not, you will need to download and install Internet Explorer 5.01 and Internet Explorer 5.01 Service Pack 1, or Internet Explorer 5.5. TECHSUPPORT REPORT FORM AT WWW.WILDPACKETS.COM When you need to address a technical support issue with one of our tech support staff and are not in an emergency situation, please use the new Tech Support Reporting Form available at http://www.wildpackets.com/support/. You can also use this form to report product anomalies or request product enhancements. NET TROUBLESHOOTING ON-LINE FORUM Have a network problem you can't solve? Seen a packet you can't identify? Is your printer, router or server doing odd things to your network? Do you need somewhere to turn for some informed, expert advice? Then join the WildPackets' net-troubleshooting e-mail list and post your question to an audience of over 1,000 of your networking professional peers. To SUBSCRIBE TO NET-TROUBLESHOOTING@WILDPACKETS.COM, send an email to net-troubleshooting-on@lists.wildpackets.com. NET-TROUBLESHOOTING SEARCHABLE ARCHIVES Net-Troubleshooting archives are now accessible from http://www.wildpackets.com/support/network_central/listserver. NETWORKING TERMS GLOSSARY Check the reference folder in your service directory for a Networking Terms Glossary and help yourself to a copy! ----- To unsubscribe, please send a message to EPW_Maint-off@lists.wildpackets.com.