|
User Guide
Installation
Once the file has downloaded completely, please open the folder containing
the file you downloaded.
Double-click the installation file you just downloaded to start installing MING Network Spy
on your computer.
At the end of installation, you must install the WinPCap 3.1 package.
Starting Network Spy for the First Time
After you start MING Network Spy, just click the "Start" button or
click menu item Control->Start to start capturing packets. Then a window will
show as below:
After select a correct network interface, you should select users to
monitor. You can select up to 10 PCs on the LAN to monitor.
Then all computers in the network of the
interface will be found and displayed in the left:
Main Window
Main window is divided into two parts: the left is the list of computers in
the network; the right shows the information of the computer.
Computer List
The Computer List shows all the computers in the network. The computer's name
displayed can be IP address, PC Name or custom name. If the computer that has
a custom name does not exist, the Icon 
will be displayed. Icon 
means that this computer has received new messages. At the same time,
an item (such as  +participant's
name) will be displayed under the computer.
Conversations Tab
The Conversations Tab shows list of all active conversations captured in the
computer. The conversation with bold font means that administrator has not
read it. Double clicks on the conversation item can view the content of
the conversation.
Mails Tab
The Mails Tab shows list of all emails sent and received in the
computer. Click Icon 
in Computer List to show List of emails received. And click Icon 
to show List of emails sent. The mail with bold font means that administrator has not
read it. Click on the mail item can view the content of
the mail. Icon 
let you view html content if the mail has html part. While click Icon  to
view attached files.
Web sites Tab
The Web sites Tab shows list of websites visited by the
computer. Click on the website item can view the content of website.
Bandwidth Tab
The Bandwidth Tab displays all traffic to/from any computer on your network.
It shows Internet traffic, LAN traffic or both (Internet & LAN). You can
see current speed, average speed (over a range of an hour) and max speed of
the day. You can view the total download and upload amounts in the
"traffic" List box. The Page "INTERNET" shows Internet
traffic of all PCs on the LAN.
User Tab
The User Tab shows some information of the computer selected. Field
"Start time" shows when the capture started. "Summary"
area shows summary of all kinds of instant messengers, mails, websites and
Files. Field "Time" shows the chat time. Field "Total
chat time" shows all the chat
time of different messengers. Field "Mails" shows how many mails
have been sent or received. "Messengers" area shows information of each messenger in the
computer.
Message Archive
All conversations are stored in a local database. You can analyze the data based on the participants, time or date, or you can scan the
conversations for keywords.
In the Message->Message Archive Window, you can browse conversations in the database of messages.
Double-click one conversation item to view the content of the conversation.
Click "Output" button to output the conversation to a file.
In the Message->Search Window, you can search conversations by keyword. After input keyword string and click "Search" button, the conversations that contain the keyword will
be displayed as below.
You can click "Stop" button to cancel it. Select one conversation and click "Messages" button (or double-click) to view.
Messenger Statistics
You can click menu item Tools->Statistics to view statistics of
messages, and get statistics result of one computer or all computers in the network. "Summary" area shows summary of all kinds of instant messengers. "Messengers" area shows information of different
messengers. Underside, there are a distribution figure of different messengers usage by messages or time.
Bandwidth Statistics
The Bandwidth statistics window shows statistics about
all defined filters. You can select one or more filter
from the list and the statistics table will display the
total download and upload amounts measured by the
selected filters during the selected period. You can
choose 'Internet & LAN', 'Internet', and 'LAN'. You
can also choose hourly, daily, weekly, monthly and
yearly statistics.
Top Messenger Users
Here, you can view top messenger users by date, time, messenger or messages.
Internet Traffic
Here, you can view top Internet users by date, time. Field
"Percent" means that the percent of total internet traffic this user
has used .
Block Internet Activities
You can block one or more internet activities. Just click
"Setup" button on "Users" page of
the main window to configure it.
Stealth Mode
Click menu item Control->Settings to Enable
stealth Mode. When the settings are shown the top option
is "Run at Windows Start up". Click the Ok
button to save your changes. Network Spy is now set to
run when Windows starts. (If you also choose the
"Stealth" mode option Network Spy will not be
visible and will only be accessible using the hot
key.) If "Automatically minimize to system
tray when run" item is selected, this option
will cause Network Spy to be minimized to the system
tray when Network Spy is run. This option is recommended
if you choose to use Normal Mode.
In Stealth Mode, you must set a hotkey.
The default hotkey is CTRL+ALT+0. You can use
second hotkey to prevent unauthorized users from
"guessing" Network Spy's hot key simply by
trying all possible combinations.
You can use a password to access MING Network Spy. This includes viewing chat logs, changing
settings, and so on.
Automatic E-Mailing
The
E-Mailing feature will automatically e-mail you the chat
logs at a set time. The chat logs will be sent as
plain-text attachments readable by any text editor such
as Notepad. The e-mailed chat logs will have a .txt
extension.
To
enable and configure the e-mailing select the
"Enable email delivery".
Description of Fields:
-
Send to - E-Mail address to receive the chat
logs.
-
Send from - E-Mail address used to send the
e-mail (may be the same as Send to)
-
Username & Password - User account
information (When use SMTP authentication login)
-
SMTP host - This is the SMTP server used to send
your e-mail. If you are unsure what to put here, contact
your ISP.
-
SMTP Port - This is the port used by the SMTP
server. In most cases, this is 25.
-
Mode - if "Send
at midnights" is selected, Network Spy will
e-mail you at about 12:00pm.
To test your e-mail settings
click the Test Email Settings button. A test
message will be sent using the e-mail settings.
Automatic FTP
The
FTP feature will automatically uploaded chat
logs to the FTP server at a set time.
Description of Fields:
-
User Name - The user
name required to log in.
-
Password - The
password required to log in.
-
FTP Host - The IP
address or host name of the FTP server (do not
include ftp://).
-
Port - This is the
port used by the FTP server. In most cases, this is
21.
-
Directory - The
directory on the FTP server to store the chat logs.
To test your FTP settings click
the Test FTP Settings button and Network Spy will
attempt to connect to the FTP server. You will be
notified if the test connection was successful. How to Achieve Maximum Security
If you activate stealth mode,
please follow the guidelines below to make Network Spy as secure as possible. Not all recommendations are
required. Please use the ones that fit your situation
and needs the best.
-
Test Network Spy before
it is used by other users.
This is a very important recommendation. For
best results, after installing and configuring Network
Spy please become familiar with Network Spy by letting it log some test instant
messages. By doing this, you will become to
accustomed to Network Spy and its features. This
will also help you to determine if any of the
following recommendations would be helpful.
-
Install Network Spy in a
different location.
When installing Network Spy, you have the
option of which folder to install Network Spy to.
The default folder is C:\Program Files\MINGNetworkSpy.
You can select a different location, something more
inconspicuous as C:\Windows\ZG, and not affect Network Spy's operation.
-
Remove Program folder.
The default program folder is "MING Network Spy". You can remove the program folder by
right-click "MING Network Spy" program
folder and delete it.
-
Delete desktop icon.
When installing Network Spy, it will create a
desktop icon "MING Network Spy". You can remove the desktop icon.
-
Rename the MNM.exe file.
When Network Spy is running, you may notice it
in the Processes list of the Task Manager on Windows
2000 and Windows XP. While it is impossible to
remove a process from this list, you can rename the
MCM.exe file so it is not as noticeable. You may
rename MCM.exe to any file name as long as it ends
in .exe. Examples include: zg.exe, solar.exe,
and so on.
-
Use two Hot Keys
If you just use one Hot Key, it is possible that
the user of the computer may discover Network Spy is running by accidentally pressing the hot key. You
can avoid this by setting Network Spy to use two
Hot Keys. The two hot keys must be pressed in ascending order to
Show Network Spy. This will prevent any accidental
discovery of Network Spy.
|
