SamKira
asked on
How to monitor who's accessing a website
Hello everyone,
I need to know how or what is the best way to know who is accessing a specific website on my network.
At work we have one student or maybve more who is downloading huge files, probably videos, every day and I need to know how to locate the computer that he's using to do so.
I know the website from where he's downloading big files (megaupload.com), now I need to know how to trace the computer.
I know the website because at megaupload we get a message that says:
"Your IP address 198.168.x.x is currently downloading a 176198314 byte RMVB file."
But how can we know from wich Internal IP that request is comming from?
I tough of the use of Ethereal/WireShark but even so how to do it.
Thanks...
I need to know how or what is the best way to know who is accessing a specific website on my network.
At work we have one student or maybve more who is downloading huge files, probably videos, every day and I need to know how to locate the computer that he's using to do so.
I know the website from where he's downloading big files (megaupload.com), now I need to know how to trace the computer.
I know the website because at megaupload we get a message that says:
"Your IP address 198.168.x.x is currently downloading a 176198314 byte RMVB file."
But how can we know from wich Internal IP that request is comming from?
I tough of the use of Ethereal/WireShark but even so how to do it.
Thanks...
ASKER
That IP address is the IP assign to us from our ISP. All machines on the network have an IP address on the 10.10.0.0 range so any computer connecting to the outside word will have the same Gateway.
So that IP is just telling me that someone on this network is accessing the website. Now I need to find the internal address that is actually downloading the big file.
I hope this clarify it.
So that IP is just telling me that someone on this network is accessing the website. Now I need to find the internal address that is actually downloading the big file.
I hope this clarify it.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I will have to test all the programs you guys comment.
Start > Run > Type COMMAND > NSLOOKUP 192.168.x.x
(Unless "it" is ACTUALLY showing 'x.x' and not the two last numbers in the set??)