VCDQuality Forums
Here you can view your subscribed threads, work with private messages and edit your profile and preferences Frequently Asked Questions Search Home  
VCDQuality Forums : Powered by vBulletin version 2.3.0 VCDQuality Forums > Off Topic > Computer and Audio/Video help > Monitoring Network (internet) activity
  Last Thread   Next Thread
Author
Thread Post New Thread    Post A Reply
Linnets
Jul 2005


Rubbery

Monitoring Network (internet) activity

I need to monitor and log the internet activity of my staff. We only have a small network (about 15 pc's) and all the net traffic gets routed through our Draytek (Vigor 2600plus) router which acts as our gateway. Our network server (Windows 2000 server) acts as our DNS.

Can anyone point me in the direction of some *SIMPLE* (like me) software that will read and log any external url that is visited by anyone on the network? I really only need http traffic i think. Ideally it would log times and dates of the activity too.

I would have thought this would be something that Draytek would build in, but if they did I can't find the fucker.

Report this post to a moderator | IP: Logged

Old Post 02-14-2008 12:42 PM
Linnets is offline Click Here to See the Profile for Linnets Click here to Send Linnets a Private Message Find more posts by Linnets Add Linnets to your buddy list Edit/Delete Message Reply w/Quote
Vampire
Jan 2005


Administrator

Depending on how much work your server is currently doing, you could always install FreeProxy on it and change the PC's proxy settings to point to your server. It's freeware (as the name suggests) and, amongst other reporting elements, there is a connection log that lists URLs visited.

I've not used it personally but it seems fairly easy to setup. It looks like a quick and simple solution for you unless anyone here knows of any better software.

:EDIT: ..you'd also need to implement a method for stopping people taking the proxy settings off to bypass it. If all that router does is allow Internet access, you could restrict it so that only your server is allowed through the router.

Report this post to a moderator | IP: Logged

Old Post 02-14-2008 01:43 PM
Vampire is offline Click Here to See the Profile for Vampire Click here to Send Vampire a Private Message Find more posts by Vampire Add Vampire to your buddy list Edit/Delete Message Reply w/Quote
socks
Jun 2005


kleptomaniac

Looking at the tech specs for the Vigour 2700 ( I couldnt see 2600) they say the following:

Management Logging/Monitoring via :

* Syslog
* Web (Browser) based interface
* Telnet Interface


Have you investigated the full ability of the router itself?

Report this post to a moderator | IP: Logged

Old Post 02-14-2008 04:29 PM
socks is offline Click Here to See the Profile for socks Click here to Send socks a Private Message Find more posts by socks Add socks to your buddy list Edit/Delete Message Reply w/Quote
Linnets
Jul 2005


Rubbery

quote:
Originally posted by socks
Looking at the tech specs for the Vigour 2700 ( I couldnt see 2600) they say the following:

Management Logging/Monitoring via :

* Syslog
* Web (Browser) based interface
* Telnet Interface


Have you investigated the full ability of the router itself?



Funny enough I was just going to post that there seems to be a syslog via the hardware, however I can't work out how to access it.

Apparently it logs via a port (514) on our servers IP address. I have just opened port 514 for tcp and udp to my IP address but I still don't know how to access these logs. The only thing I can think to do is type the server ip address plus :514 into a browser. But that just returns an error message as follows:

"The webpage cannot be displayed

Most likely cause:
Some content or files on this webpage require a program that you don't have installed."

Anyone care to hazard a guess as to where these logs are being created?

Report this post to a moderator | IP: Logged

Old Post 02-14-2008 05:18 PM
Linnets is offline Click Here to See the Profile for Linnets Click here to Send Linnets a Private Message Find more posts by Linnets Add Linnets to your buddy list Edit/Delete Message Reply w/Quote
LOLobo
Jan 2003


Canis rufus atheist

hahaha

Let me make an ssh tunnel, than see you try to monitor my traffic! I'm on PC #13 btw

Report this post to a moderator | IP: Logged

Old Post 02-14-2008 05:46 PM
LOLobo is offline Click Here to See the Profile for LOLobo Click here to Send LOLobo a Private Message Visit LOLobo's homepage! Find more posts by LOLobo Add LOLobo to your buddy list Edit/Delete Message Reply w/Quote
Vampire
Jan 2005


Administrator

quote:
Originally posted by Linnets
Anyone care to hazard a guess as to where these logs are being created?

Syslog will be events about the router itself (e.g. interface state change) and wouldn't log details of the traffic passing through it. As you're sending it to your server, your server must have the syslog port open on it which means you're running a syslog daemon of some sort - it'll tell you in there where the logs are being captured.

:EDIT: ...I'm assuming you have a syslog daemon or something running... if you don't, the messages will simply be blackholing.

Report this post to a moderator | IP: Logged

Old Post 02-14-2008 06:55 PM
Vampire is offline Click Here to See the Profile for Vampire Click here to Send Vampire a Private Message Find more posts by Vampire Add Vampire to your buddy list Edit/Delete Message Reply w/Quote
Linnets
Jul 2005


Rubbery

Its all beyond me. I just fuckin blocked any page or url that includes the words "facebook", "myspace" or "bebo".

Maybe they'll get on with some fuckin work now. Freeloading Wankers.

Report this post to a moderator | IP: Logged

Old Post 02-21-2008 05:04 PM
Linnets is offline Click Here to See the Profile for Linnets Click here to Send Linnets a Private Message Find more posts by Linnets Add Linnets to your buddy list Edit/Delete Message Reply w/Quote
Robert Jones
Apr 2003


cuntface

try "Network Magic" it's pretty simple and a good little app. sounds like just the thing you need.

Report this post to a moderator | IP: Logged

Old Post 02-21-2008 05:56 PM
Robert Jones is offline Click Here to See the Profile for Robert Jones Click here to Send Robert Jones a Private Message Find more posts by Robert Jones Add Robert Jones to your buddy list Edit/Delete Message Reply w/Quote
All times are GMT. The time now is 11:45 AM. Post New Thread    Post A Reply
  Last Thread   Next Thread
Show Printable Version | Email this Page | Subscribe to this Thread

Rate This Thread:

Forum Rules:
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is OFF
vB code is ON
Smilies are ON
[IMG] code is ON
 

< Contact Us - www.vcdhq.com >

Powered by: vBulletin Version 2.3.0
Copyright ©2000, 2001, Jelsoft Enterprises Limited.