• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 705
  • Last Modified:

How do I monitor internet traffic across the domain?

Hi, I have a customer running Server 2003 Standard in an AD domain who wants to monitor all the internet traffic of the workstations in her office.  How do I do this?  WS are XP Pro.
0
broncbuster
Asked:
broncbuster
1 Solution
 
rgutweinCommented:
Hello,

I use ntop and it is a great tool to monitor your network.  First thing is that you need to set up port mirroring on your switches, or setup a passive hub.  I like to monitor the port where my router is plugged into so that I can see all the traffic coming in and out.  If you have linux, then you can go to this website, and find instructions on how to get it up and running:
http://www.ntop.org/

Unfortunately I only have Windows computers on my network so you have to find a Windows compiled version of ntop.  The site I originally got the compiled version from, OpenXtra, no longer supports it and took it down, so I have the file hosted here if you are interested:
http://www.box.net/shared/t5nqp6q9tx

Here are the instructions on how to install it:
http://www.ehow.com/how_4468882_install-ntop-windows.html

When you find a site that comes up on your list on ntop, you can click on it, then it will show you the clients who are accessing it.  Normally it will be an IP address, or the computers name (it will not show the actual user logged onto the computer).

Also, You need to mirror the port that you are trying to monitor.  Example.  If your Gateway/Router is on port #1 on the switch, then you will need to have some other port (lets say port #2) monitor/mirror port #1.  You would then install ntop on a computer/laptop that is plugged into port #2 because he will now see all the traffic going to and from your Gateway/Router.  Here is a website that explains it a little more in detail:
http://www.networkdictionary.com/howto/NetworkAnalyzer.php

I hope this information will get you pointed in the right direction & good luck!
0
 
gengw2000Commented:
Our company uses WFilter to monitor and manage internet access.
Hope its also helpful to you.

http://www.imfirewall.us
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now