DonationCoder.com Software > UrlSnooper

Sniffing, but can't smell

<< < (7/7)

mouser:
the good news is that at least the world is not totally insane.

the bad news is that this method of downloading a file is not very useful, because it doesnt allow url snooper to spy on the network traffic which is what you really need to do to get most sneaky urls.

rjam:
Yes, that (the bad news part) was slowly beginning to dawn on me.

I was so happy to get ANY urls, that a lot of them seemed like heaven,
even if they were not coming in a way that would be useful.

Closed out urlsnooper and browser.

This time I "allowed" urlsnooper to connect to the Internet when my firewall prompted me.
It shouldn't be promting me, because I had the firewall config file set to "allow" urlsnooper
in the application list.
I'll go back and see if/how that got changed.

Also, this time I again allowed cookies (it didn't specify from where).

And the 173 urls auto popped in from youtube.

Same process for c-span.org auto pops in 342 urls.

After 173/342 urls, the "sniff network" auto turns itself off.

Opening these two websites in my browser, rather than in the urlsnooper "download" mode,
does not get any urls.

However I inadvertently fibbed when I said no packets come in with that narrow scan feature on.

I now see that a small number of packets came in right at the start, before they stopped coming in,
when I load a browser page for c-span or youtube.
I think the number was a few dozen for one site, and maybe close to a hundred for the other.
It happend so fast, that my aging eyes didn't notice till recently.

btw, I have been meaning to thank you for the help.

Very interesting and rewarding experience, even though final solution is not yet found.

I probably should go to bed now.  2:30 is past my usual bed time.

More later, if I learn or see anything.

rjam

rjam:
Rechecked my AVG-Grisoft firewall config settings.

urlsnooper is still in the "allowed" application list.

however in my profile switch tabbed section,
I have a couple areas (aka network adapters) that are "unassigned" to a profile.

profile options are to "allow"  "block"  or "stand alone computer"
if I don't assign one of those 3 options to those new areas/networks,
then I guess "unassigned" gets auto entered

my default for known existing areas/networks, is "stand alone computer"

I don't know why these new areas/network adapters are showing up there

I deleted some of the duplicates and unnassigned areas/networks there a couple days ago.

Now they're back.

Over last year or so, I sometimes get a firewall notice popup saying there's a new area.
But that happened so often for so long, that I just auto click it closed.
I don't think I knew why those new areas/networks kept showing up periodically.
I just wanted them to go away.
I can't keep assigning "stand alone computer" to an unlimited number of these.
I don't even remember for sure how to do that anymore, instead of just closing the little grayed out msg box.

rjam:
I've carefully read my AVG firewall info and it's references and distinctions between

network
     "adapters"
     "interfaces" &
     "areas"

The use of those 3 names overlaps in some ways, but is separate & distinct in other ways,
depending on the tools and controls being used within the firewall configuration choices.

Bottom line, I've removed all of the extra or duplicate network "areas" for local networks/interfaces. 
I've retained two essential local "interfaces", one for TV card and one for my network card.

This deletion of extra local network interfaces made no difference in urlsnooper function.

One config tab labeled "Networks" has headings inside it as:

"All Remote Networks" &
"All Local Interfaces"

Then individual named adapters, interfaces or areas are listed within each of those headings.


Another config tab labeled "Profile switch" has headings inside it as:

"All Local Interfaces" &
"All Network Areas"

Then individual named adapters, interfaces or areas are listed within each of those headings.


= = = = =

I'd told you that my computer was a stand alone, not otherwised networked inside my home,
other than it's connection to the Internet via Comcast ISP.

Well, this AVG firewall config tab listed a

"Local Network"

under the heading of "All Network Areas"

It had an assigned profile,
plus area activation tally,
last time & date activated, &
IP address of net gateway.

I recorded that data, then deleted that local network.

As I mentioned, that did not change urlsnooper performance.


= = = = =

The other 3 network interfaces/areas that I deleted,
were under the "All Local Interfaces" heading,
and were duplicates, seemingly inactive.


= = = = = = =

Despite URLsnooper not working as prescribed,

I have been able to go back to YouTube,
and have URLsnooper get embedded urls
for the video in which I was interested.

I did that with the test you (Mouser) showed me,
by manually typing into the field at the bottom of urlsnoooper search window,
the url of the webpage offering the video,
then clicking on the "download" button.
also at bottom of urlsnooper search page.

This loaded some dozens of urls,
similar to the way c-span's page did.

I found a half dozen promising urls in that list.
And tested those out in a separate browser, not via urlsnooper.
Some of them played the same video in the same page context as YouTube does.
Some do it a bit differently.
One did it in auto full screen mode.
The quality of that video already seemed better than previouslly accessible thru YouTube.
Then when I turned off all unnecessary programs on my pc,
the quality of the video was even better, even though not perfect.
The audio has always been high.
It might be worth recording now via my Grabbit program,
or by ASF recorder.

My recording of that video by Snaggit previously,
had too low quality video, tho the sound was good.


= = = = =

Meanwhile, I still also have two items listed in my firewall config network tab
under the heading of
"All Remote Networks"

One item is "Internet"
It has the options grayed out for editing or deleting it.

The 2nd item is one which I created/added manually a couple days ago
when URLsnooper failed the network autodetect test.
That one is for my SMC EZ Card 10/100.
It has options active to edit or delete it.
Editing button has further options for IP address, range, mask or whole network.


This is a long read even for the writer.

But doing those details, helped me sort out something that works well enough to meet my basic needs
for the short term.

Thanks again for all your help.

Navigation

[0] Message Index

[*] Previous page