refine sniffer