STEFANO DEMILIANI

I never thought my messenger was particulary secure, but I didn't realise there was a product out there to capture all I said!

I guess there are more secure chat clients out there, but then again, none of my non-technical friends would use anything but messenger

Are there any measures you can take against this? For example a system to encypt your messages and send them to your home computer, where they can be sent unsecurely in relative safety?

MSN ids not so secure because messages are sent on the net in clear text form. What I've totally ignored is that there was a commercial product to perform these types of tasks. However, there's a free tool for encrypt your MSN mesages. It's called Simp Lite and you can download it from here:
http://www.secway.fr/products/simplite_msn/home.php?PARAM=us,ns

Another good MSN encryption tool (free) is Spyshield: http://www.commandcode.com
It's good, but to use it you have to download an install PGP first.

Another product is IM-Secure from ZoneLabs

Bu how we can get the friend's IP in MSN Sniffer?

MSN messages are send to an MSN server, there is no direct connection between the two persons that are chatting. The only way of obtaining someone's ip address via MSN is to make that other person accept an invitation requesting an IP disclosure, such as sending a file.

Sniffing MSN packets is pretty easy, you need a bit of knowledge about internet protocol, then googling for the msn protocol gives you the syntax. You parse everything and *bingo* you have it.

I had fun with packet sniffing MSN messages at school and I've written a console program to do so. Althrough it displays messages, it doesnt track conversations, this means you do not know to whom the message was sent.

If anyone wanna have fun with it just mail me at mathieu.rene at gmail dot com and I'll send you the source&binary (it's in C and it's using winpcap)

-- Math

Hi Math,
it's realy cool what you say about your console program. Coud you send me a copy of C source and binaries. I want to try it on linux. Here you are my e-mail: ove@zappmobile.ro. Thx!

ask_yagmur_21@hotmail.comsfd<ff<fdad>ASDdss

I do appreciate the thumbs up... I'll have to turn it over to you to maintain. Hah!