Monitor LAN

[kwanbis]

Hi. I want to monitor what the users are doing on a LAN.

Mostly, i want to make sure they are not downloading movies/music/etc. What tools and how should i do it?

NOTE: if you think there is a better forum for LAN issues, please let me know. Thanks.

[uid0]

You could try squid and dansguardian.

Wont run on windows though.

[kwanbis]

both are "proxy" like. I don't want to put anything in between. I want to "listen" to the nw. I was thinking wireshark (ethereal)

[Arie]

both are "proxy" like. I don't want to put anything in between. I want to "listen" to the nw. I was thinking wireshark (ethereal)

Possible, but it will give you a lot of work to figure all the traffic out. You could start by proper filtering, then perhaps exporting the whole dump and do a search on that. But like I wrote, it will give you a lot of work, even if you would only do this occasionally. Stripping down your whole dump could be best done using some sort of script, but writing a proper script will also take plenty of time. Anyway, best would be still to put a proxy in between for instance.

[cluberti]

both are "proxy" like. I don't want to put anything in between. I want to "listen" to the nw. I was thinking wireshark (ethereal)

Any particular reason you want to do things the (really) hard way?

[arctirus]

http://www.ntop.org/overview.html

[lsjames]

Active Wall support gateway,bridge,passby mode. Maybe it is fit for you.

http://en.lanctrl.com

Edited September 19, 2007 by lsjames

[nitroshift]

How is your network configured? P2P, domain? I use Wireshark on the DC and filters It is doing its job nicely

[arctirus]

I use Wireshark

I'd encourage you to check out the ntop link I posted. Ntop is basically a nice html front end report system that runs on top of ethereal / wireshark. It makes things so much easier, oh, and it's free.

[nitroshift]

I'd encourage you to check out the ntop link I posted. Ntop is basically a nice html front end report system that runs on top of ethereal / wireshark. It makes things so much easier, oh, and it's free.

Thanks, just read your post, will try it tomorrow