simple sniffer