Monitoring network traffic

HI. For the last few months my internet usage has been extreme. I have a netgear WPN Router and 3 pc's behind it. My internet service provider has almost stopped my internet due to the usage and I dont know where or how this is happening. I have the dates for the days in question from my usage monitor but my question is, can I figure out where its comming from or if I am being hacked or used for spamming. There doesnt appear to be any logs in my router that I can make any use of. Is there a way of tracking whats going on. Any help would be greatly appreciated. Thankyou
Leah7auAsked:
Who is Participating?
 
debuggerauConnect With a Mentor Commented:
With netmeter on each PC you will soon know who it is...
0
 
naughtonConnect With a Mentor Commented:
enable smnp/2 on the router and use a toolset sucha s solarwinds engineers toolset -
0
 
johnny_the_knifeConnect With a Mentor Commented:
You could use a packet sniffing tool like Ethereal to find out what is traversing your network.

Something else to try is using a tool like http://www.hackerwatch.org/probe/ to run a port scan against your network to determine if any ports have been opened which expose you to a vulnerability.

I assume you have checked all the computers on the network for malware using both a virus scanner (you can get a free threat detection test from www.sophos.com) and an anti spy-ware tool like ad-aware or Spybot (http://www.safer-networking.org/index2.html).
0
Evaluating UTMs? Here's what you need to know!

Evaluating a UTM appliance and vendor can prove to be an overwhelming exercise.  How can you make sure that you're getting the security that your organization needs without breaking the bank? Check out our UTM Buyer's Guide for more information on what you should be looking for!

 
SunBowConnect With a Mentor Commented:
Microsoft's NetMon program will allow monitoring of netwrok traffic and allow for filtering.

Product like ZoneAlarm can identify to you any TCP/IP sources or destinations.

For OS like XP you can review event logs to assess what may have been happening
0
 
Leah7auAuthor Commented:
Thanks everyone, sorry I have been unable to use the internet of late due to my service provider slowing down my speed dramatically. I will try all of the above and see if I can make any sense out of it. How do I enable snmp 2, is that just a simple setting in the router for port forwarding.
0
 
debuggerauConnect With a Mentor Commented:
Good luck!
snmp is not easy to setup, manage or report on...
Great technology for large network, so they can be designed and monitored etc etc etc.

BUT, for three PC's - NOT worth it..

Your router is soho type and doesnt come with net translation counters, so forget that...

A sniffer like ethereal works a treat, but to get everyones traffic, you will need to have a hub (not switch) and use a dedicated PC to packet sniff...

So if you want more and more information to make sense of, please put these suggestions to practice, you will learn a lot, and I do carry this stuff with me everywhere, but really, netmeter will just tell you who, when and where, which should be enough to resolve getting the ISP back onside...

Best wishes...
0
 
Leah7auAuthor Commented:
Thank you all for your sugesstions, this is well enough to get me going on the right track. I will try and get it resolved but sincerly thanks for taking the time to answer me. KIndest regards - Leah
0
All Courses

From novice to tech pro — start learning today.