Link to home
Start Free TrialLog in
Avatar of awilderbeast
awilderbeastFlag for United Kingdom of Great Britain and Northern Ireland

asked on

monitoring users url vists, port mirroring?

hi all,

im after a solution to monitor all url visits from users on the network

i have a cisco 877 that i could set up port mirroring on? then send the data to our server and use an application to find out what users are doing?

ive googled til my hearts content and found so many different things that do different things, but i dont know where to go with

i just want for example
UserName | URls |Time
John Smith | site.com/page1.htm | 12:50pm
John Smith | site.com/page2.htm | 12:51pm

etc
etc

thanks for any help
Avatar of meteorelec
meteorelec
Flag of Ireland image

did you think of setting up a proxy server?

free proxy is a good stable free application and has allot of features and full logging capability

http://www.handcraftedsoftware.org/index.php?page=4&action=category&cat_id=2
SOLUTION
Avatar of gengw2000
gengw2000

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Avatar of Jan Bacher
Jan Bacher
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of awilderbeast

ASKER

so far i have tried GFI web monitor, and looked into websense and trend micro
websense is too big for us at 250 to 250,000 i only need it for 30

i couldnt get free proxy set up and going, may try that one again yet dont know

i will look into imfirewall, now, as i can see though i should have to mirror the port for the sortware to work?
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
the thing is what i find with them all, is they only give the domain name the users are going on, i want more detail than that,

you see we allow some domains to be viewed, like bbc.co.uk/news but only certain articles can be work related, im trying to find out what there clicking on within the domain so for example

userA www.bbc.co.uk/news/mangetsbitbydog.htm
userA www.bbc.co.uk/news/workrelatednews.htm

then i can say oh ive seen you on workrelatednew but why you going on mangetsbitbydog, how is that work related etc etc

anyone know how i can do this?

THanks