[CLUE-Tech] Activity monitoring

[Jay Seven Ess]

On Sunday 12 October 2003 19:21, Russell Glissmann wrote:
> Has anyone any experience in logging Internet activity, especially
> from certain workstations?  If so, what is required both hardware
> wise as well as software?  The workstations are Windows 2k Pro (you
> didn't want this to be easy did you?).  Currently this client is not
> running a firewall or proxy server, but that is something that is in
> the works. Any idea is appreciated, ideas that are doable are even
> better!  :-)
>
> TIA
> Russ


One way is http://www.ethereal.com

careful use of both packet capture filters as well as display filters
and colorized display of the packets make it very nice as a GUI. 
The comand line version (comes with Linux source, don't know about 
winderz but Ethereal is supported on win32) is called tethereal. 
I use both GUI and CLI version all the time on a 450MHz PIII that is 
also a functional work station running RedHat 9.0 with no noticeable 
load issues but that depends on how you use it and the traffic volume 
on the network. 
YMMV on windows boxen.

J