Instant messengers have their own ports via which they exchange messages. If there is an anternative port specified in the settings of the program or it is connected via a proxy server, the StaffCop agent will not be able to detect messages until it knows the alternative port number.
In this case, message interception problem is solved like this:
- Find out what port number is used in the IM. It is always specified in its settings.
- Find out whether a proxy server is used or not. If it is, you should specify the proxy server port in the agent properties.
- Open the agent properties in the administrative module and specify the address of this alternative port in the "Monitored ports" field.
Besides, it has been noticed that some ICQ programs use ports completely different from those specified in their settings! To determine the real port number, you should execute the command netstat -b in the command line. It will display the port that is actually being used at the moment. You should specify it in the agent properties.
Here is a sample output for the netstat command:
Active Connections
Proto Local Address Foreign Address State PID
TCP earth:1080 64.12.31.96:5190 SYN_SENT 1636 [qip.exe]
TCP earth:1067 icq.hnet.ru:5198 ESTABLISHED 1636 [qip.exe]
Here you can see that the program actually uses port 5198 besides port 5190 specified in the settings. It should be additionally added in the agent properties.
