-
June 15th, 2009, 12:23 PM
#1
Member
Wireshark
Hi All,
The age old question about network abuse and security. What is the better or recommended network monitoring tools out there to accurately monitor internet traffic ONLY going IN and OUT of a network? The only thing acting as the Firewall is the router. All internal addresses are being NATted and I need to see who is abusing the internet connection?
I have logs which show some DOS attacks but I also have logs that show 4-8Gb of downloads in a week.
The client primarily uses the internet connection to send email and has a staff compliment of about 6 and the only things they should be receiving or sending are architectural drawings.
I heard about wireshark but will it create a realtime log for me and would it be easy to analyse this log? Has anyone had any experience with wireshark? What are your views?
Looking for something simple but effective - I want to see connections, ports, downloads(if possible) and all the nice stuff to nail the suckers who've been making a sucker out of me!
Any help will do!
Thanks all!
.....I rather not say....
Similar Threads
-
By Ignatius in forum Network Security Discussions
Replies: 6
Last Post: October 31st, 2007, 10:22 AM
-
By Irongeek in forum The Security Tutorials Forum
Replies: 1
Last Post: June 8th, 2007, 02:59 PM
-
By psaux in forum Network Security Discussions
Replies: 8
Last Post: May 23rd, 2007, 07:36 PM
-
By sommersby in forum Newbie Security Questions
Replies: 65
Last Post: August 13th, 2006, 10:49 AM
-
By mmkhan in forum Security News
Replies: 11
Last Post: June 13th, 2006, 01:01 PM
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|