Solved

Logging use of computers on a LAN

Posted on 2004-04-12
1
243 Views
Last Modified: 2010-04-11
I wish to automatically and stealthily check on the usage of computers on our LAN. We run a small Internet cafe and we need to protect public computers from misuse (we suspect staff coming in at night to download stuff). At this stage, all I need to see is when computers were on and when they were switched off. Also being able to log the sites and ports visited/connected to and MB up/downloaded would be an advantage. We are connected via a Cisco 1700 with OS version 12.1 and we cannot at the moment afford a hardware firewall (we are in a poor country). Some freeware or low-cost software is needed. Maybe we have a functionality in XP which I am not aware of.
0
Comment
Question by:leemingd
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 1

Accepted Solution

by:
Arrummzen earned 30 total points
ID: 10808964
First check
Control Panel->Administrator Tools->Event Viewer->System Log

Look for things in the time period you are interested. Things like services starting can mean the system just started up. Maybe you could use a sniffer like Etheral? Did you check your internet explorer history?

The best solution is to have a computer locked in a secure cabnet, and have all connections to the internet go through it. Install a sniffer like Etheral on it to monitor network trafic. The sniffer is the most compleat solution, just make sure they can't disable it physicaly (unpluging it from the network (Put the hub/router/switch in the cabnet with it). Make sure they can't bypass it and connect to the internet (put your modem in the cabnet as well). The sniffer will let you know -
A: Every connection they make
B: What they download upload
C: How much bandwidth is used
D: What computer did what
E: When computers were turned on (If they are connected and use DHCP, you can filter for DHCP packets)
F: What URLs were visited
G: If encryption is used, you won't be able to tell what they sent (unless you break the encryption), but you can tell who they sent it to.
H: It will record instant messanger converstaions.
Note that because it records everything it can use a lot of memory, you may want to filter out some trafic (look into Ethereals filtering abilitys). For example maybe you only want to record DNS requests (This will tell you all the host names looked up, for example www.msn.com).

In addition I would set up a video camera to watch people.

Thank you for your time,
Arrummzen
0

Featured Post

Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There is a lot to be said for protecting yourself and your accounts with 2 factor authentication.  I found to my own chagrin, that there is a big downside as well.
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
Suggested Courses
Course of the Month11 days, 1 hour left to enroll

632 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question