DNS requests log from user behind SBS 2003R2 domain network

Any way for me to see DNS requests from clients behind a SBS 2003R2 domain.  Clients use server to forward requests out on the internet (DNS redirectors).  Clients have Primary DNS of 192.168.0.1 (which is server) and then server redirects their request to DNS server that I specified in DNS forwarders on server.
stevedionAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Hardeep_SalujaCommented:
Hi Steve,

You can download nettrace 1.0 or you can run Network monitor/Ethereal tools to capture what clients are querying to.. its very simple and you can filter client's/server ip addresses or Protocol that you want to see ..

http://www.filetransit.com/view.php?id=5882
http://www.brothersoft.com/.net-trace-route-component-142093.html
http://www.wireshark.org/download.html
http://ethereal.brothersoft.com/
http://www.microsoft.com/downloads/details.aspx?familyid=9d467a69-57ff-4ae7-96ee-b18c4790cffd&displaylang=en (This includes network monitor or you can also download it deom Add/remove windows components)

Hope this helps..
Please let me know.
Hardeep Saluja
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
stevedionAuthor Commented:
Hi Saluja,  Tks for your response.   I forgot to mention that what i want to see is what websites they are browsing to.  I do not really care of IP address, i just want to know where my clients are browsing to on the internet.  I believe these tools will give me IP address and Protocols.  I am looking for something more descriptive (domain names).
0
Hardeep_SalujaCommented:
Hi Steve.. in response of packet you can see website name as well if u use Ethereal /Winshark
That displays the website name as well ..
Also, following is a good link:
http://www.vista-files.org/category/network-internet/browser-tools/
0
ryansotoCommented:
For thsi to work you would need to run ethereal from the DNS server right?
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
SBS

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.