VERBOSE network monitoring solution(everybody's experience is needed plz)
Posted on 2011-05-12
I'm newly hired in a new company (hence new network), and i've been assigned the task to implement a very verbose monitoring system, but the thing is i don't have much experience in that field, and i don't know what to search because it's not an IDS or IPS :
1-We need a program/system to monitor a specific user traffic, i want to know every URL he is going to, every system he logs in to ,i even want to know if he pinged a specific IP !!
2-Same as "1" but for all our users
3-We need a monitoring system to log everything going on on the network , of course based on ip/mac/etc. source to destination and time/date.
4-we need a prog/system to be a centralized location to collect all our windows clients logs,windows servers logs and sql servers logs, and display them in a more proper manner than the built in windows event viewer.
-we are in a windows server 2008/ windows 7 environment
-all our switches are cisco 3560 so i can do port mirroring if needed
I know i may sound insane but please i need everybody's experience, and thank you in advance :)