Re: IM & P2P packets

["Gaddis, Jeremy L." <jeremy () linuxwiz net>]

ahmad mubarak wrote:
> i am new in infoSec field so my manager asked me to give him
> a list of IM and P2P users in our network
>
> i searched the Internet to find any tool to help in this task but no result
>
> so is there any one can help !!! to achieve this task
>
> ideas , tools , procedures will appreciated

Snort [http://www.snort.org/] will do the job.  It has default rules 
that will trigger on most IM and P2P traffic.

HTH,
-j

--
Jeremy L. Gaddis, GCWN
http://www.jeremygaddis.com/

"In theory, theory and reality are the same.  In reality, they're 
different."