Security Basics mailing list archives

monitor traffic on host


From: "Kelly Keeton" <kellyrkeeton () gmail com>
Date: Fri, 14 Sep 2007 19:40:55 -0700

I have a issue where I have been asked to monitor all web traffic on a
employee. I need to as quick as possible set up a transparent device
that will monitor and log all web traffic in the clear. anything sent
or rx over the network. ideally it would also monitor smtp, ft, etc. i
need real time reporting so tcpdump wont work, snort also i dont think
is the correct answer. is there any "prebuilt" knoppix or vm-appliance
that will accomplish this?


Current thread: