DNS requests log from user behind SBS 2003R2 domain network

Posted on 2008-11-11
Last Modified: 2012-06-27
Any way for me to see DNS requests from clients behind a SBS 2003R2 domain.  Clients use server to forward requests out on the internet (DNS redirectors).  Clients have Primary DNS of (which is server) and then server redirects their request to DNS server that I specified in DNS forwarders on server.
Question by:stevedion
    LVL 6

    Accepted Solution

    Hi Steve,

    You can download nettrace 1.0 or you can run Network monitor/Ethereal tools to capture what clients are querying to.. its very simple and you can filter client's/server ip addresses or Protocol that you want to see .. (This includes network monitor or you can also download it deom Add/remove windows components)

    Hope this helps..
    Please let me know.
    Hardeep Saluja

    Author Comment

    Hi Saluja,  Tks for your response.   I forgot to mention that what i want to see is what websites they are browsing to.  I do not really care of IP address, i just want to know where my clients are browsing to on the internet.  I believe these tools will give me IP address and Protocols.  I am looking for something more descriptive (domain names).
    LVL 6

    Expert Comment

    Hi Steve.. in response of packet you can see website name as well if u use Ethereal /Winshark
    That displays the website name as well ..
    Also, following is a good link:
    LVL 24

    Expert Comment

    For thsi to work you would need to run ethereal from the DNS server right?

    Featured Post

    Find Ransomware Secrets With All-Source Analysis

    Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

    Join & Write a Comment

    I've often see, or have been asked, the question about the difference between the Exchange 2010 SP1 version, available as part of Small Business Server (SBS) 2011, and the “normal” Exchange 2010 SP1 Standard. The answer to the question is relativ…
    Because virtualization becomes more and more common, and, with Microsoft Hyper-V included in Windows Server at no additional costs, and, most server hardware nowadays is more than capable of running a physical Small Business Server (SBS) 2008 or 201…
    It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now