How to Sniff MSN chats with wireshark? How?

Question

Hi,

I want to know this for chat monitoring on my network. Im the admin of the network.

Ok, i have a laptop notebook running BACKTRACK 2 linux.

It has wireshark 0.99.4 running on it.

I have heard from my previous question that it is possible to sniff msn chats with wireshark..

Notes:
I heard about a MSNMS protocol???

Im new to this linux but have been sniffing computers for a while now, but now im sniffing some answers!! :D.

As im new, could you give me a also step by step guide?

Thanks!

Steve B????

I havent posted this anywhere apart from here, because i cant find any answers!

Also Steve B, this is for LOCAL network security. Its a policy on my network.

As im the admin, i have permission to carry out such security.

Im not going to use this for hacking. I;d guess you wouldnt be able to use the same process with remote anyway!!
I new to this sniffing program!

Answer 1

Depending on the hardware you're connected to and how your network is setup would depend on the way to sniff it. For example, if you're using a hub with all computers connected to it, you're set to start sniffing traffic. If you have a switch, you need to get the traffic to route through your NIC so that you can sniff everything. The latter is done by flooding the switch with MAC addresses so that it falls back to act as a hub rather than a switch (sends packets to all ports). A program to do this would be dsniff2.

Once you were flooding the ports, you should be able to simply sniff the MSN packets. I don't think MSN messenger packets are encrypted, so all you need to do is capture them and you should see passwords and conversations in the clear. If there's any SSL transfers, you could possibly use sshmitm to see those passwords and break those sessions open.

WG

Answer 2

You do know Yahoo monitors Questions don't you ?