This is our old Q&A Site. Please post any new questions and answers at

i tried t sniff ip messanger chat using "msnms" command in wireshark....but noone packets shown...plz give me some proper way to sniff chat of ip messanger in LAN connection...i have submit this project in 2 days... if any technique for this project then mail me on "[email protected]"...


asked 14 Sep '13, 22:21

john6's gravatar image

accept rate: 0%

edited 15 Sep '13, 01:08

grahamb's gravatar image

grahamb ♦

Please don't ask duplicate questions and please stop decorating the question title.

(15 Sep '13, 01:09) grahamb ♦

i have submit this project in 2 days.

sounds like homework to me.

Furthermore, you already asked the same question.

Have you ever read the docs of Wireshark? Have you ever watched one of the tutorial videos? If you have done that, please tell us what you don't understand and we will help you.

However, if you expect us to do your homework, by giving you details steps (as already asked in the question above), this site might be the wrong place.


permanent link

answered 15 Sep '13, 01:07

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
accept rate: 15%

i show 3-4 those videos "msnms" command use for sniff msn packets but i couldn't get "msnms" any other technique???

(15 Sep '13, 04:12) john6

so any other technique???

hm.. did you tell us how your network setup looks like? I can't find any...

So, do you try to capture

  • Ethernet traffic
  • wifi/wlan traffic
  • traffic of your own PC
  • traffic of other PCs in your network
  • do you use a switch
  • is it a managed switch
  • What is your current capture
(15 Sep '13, 11:39) Kurt Knochner ♦

So, 2 days to go - you better hurry up then! If this is your homework you got to 'work' this out by yourself though. Here some questions you need to answer yourself.

You think you've captured the msnms traffic:

  • Do you see tcp.port==1863 traffic as per
  • If not, which port are communicating on to your msnms server? "frame contains 4d53:4720"
  • Are you familiar with the "Decode As" function?
  • Is the session SSL/TLS encrypted? "tcp contains 17:03:00 or tcp contains 17:03:01"
  • Does your wireshark recognize msnms in this sample capture?
permanent link

answered 15 Sep '13, 05:50

mrEEde's gravatar image

accept rate: 20%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 14 Sep '13, 22:21

question was seen: 3,893 times

last updated: 15 Sep '13, 12:08

p​o​w​e​r​e​d by O​S​Q​A