How To - Responder - Accessing MSMQ on Responder Systems

Version 5



    Responder uses Microsoft Message Queuing to communicate with client machines. Listed below are some of the methods available to find and manage the messages used for Responder communication. Some of the steps may vary depending on the operating system being used.


    1. On the application server where the Responder Windows Service is running, access Computer Management.

    a. Open Control Panel Items and select Administrative Tools > Computer Management. It can also be found by right-clicking the Computer icon on the desktop and selecting Manage.

    2. Message Queuing is located in a number of additional places, depending on the operating system.

    a. It may be located under Services and Applications:

    2014-07-21 13_33_42-Win2012 - 10.2 - VMware Player (Non-commercial use only).jpg

    b. It may also be listed under the Features section:

    2014-07-21 13_45_14-Win2008 10.2 - VMware Player (Non-commercial use only).jpg

    You can manage existing queues and create new queues, if necessary. Responder stores all of the queues into the Private Queues location, and it will create its own queues when the services start. Queues should not be removed while Responder services are running. If you are deploying an external message router, then the queues will exist on the computer that is running the message router processes and not necessarily the application server.


    Accessing MSMQ in a Windows Clustered Environment

    Microsoft Windows clustering uses a virtualized machine name that is visible to client machines regardless of how many servers are part of the cluster. Responder is configured to point to this cluster group and not individual application servers. This cluster group is where a connection should be made to verify the MSMQ traffic. Additional steps will be needed to access Message Queuing that is running inside a cluster.

    Rather than launch Computer Management directly from the Application Server, you should remotely connect to the cluster name.

    1. Open the MMC application by clicking Start > Run and typing MMC.

    2. Select Add/Remove Snap-in from the File menu.

    2014-07-21 13_59_53-Win2012 - 10.2 - VMware Player (Non-commercial use only).jpg

    3. In the Add or Remove Snap-ins section, add Computer Management to the Selected snap-ins. In the Computer Management pop-up window, click the Another computer radio button and type the name of the cluster group in field.

    2014-07-21 14_15_53-Win2012 - 10.2 - VMware Player (Non-commercial use only).jpg
    4. Navigate to Message Queuing using one of the location methods listed above.