create sniff