KFSensor's Network Protocol Analyzer feature makes use of the WinPCap library.
WinPCap is the industry standard network packet capturing library and by using it KFSensor can work along side other security software such as Wireshark.
KFSensor will work without WinPCap being installed but functionality associated with the Network Protocol Analyzer will then be disabled. It is best to download and install WinPCap before installing KFSensor, though it is also possible to install it later.
KFSensor will only work with certain WinPCap versions. Check the KFSensor download site for more information.
The WinPCap installation program can either be obtained from the KeyFocus web site or direct from the WinPCap web site:
See the Network Protocol Analyzer Administration section of the Advanced Service Configuration section of this guide for more information.
To install KFSensor you must be logged on with full administration rights to the local machine.
In the next step you will be asked to choose the folder where KFSensor should be located.
The "Program Files" path is a good place to install KFSensor as it inherits a high level of access security. This is explained in the next section.
After selecting the program group where KFSensor should be installed in the Start menu, the installation will begin.
You will need to restart your machine before KFSensor can become operational.
You should register your copy of KFSensor within two days to make it fully operational.
You can then either start using KFSensor straight away or complete the secure aspects of the configuration, as described in the next section.