Web Traffic Monitoring à la Span Port

[jmagee at thevigilant.com (Joe Magee)]

Hey Everyone, 

 

I had a quick question, is there any good open source tools that do web traffic monitoring? (i.e. promiscuous mode eth 
interface off of a spans port?) I'm interested in doing some basic monitoring and ideally sending those logs to a SIEM 
tool. 

 

I know proxy's have this logging capability, however I was hoping to be able to snag it off the wire and possibly 
answer questions such as: What sites are my users visiting? How many hours per day are they browsing the internet?

 

Thanks in advance!

 

Joe

 

Joe Magee

Chief Technology Officer

Cell +1-617-921-8671

Office +1-201-324-1800 x202

 

  

securing and enabling dynamic business

www.thevigilant.com <http://www.thevigilant.com/> 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20091216/9cbf32f4/attachment.htm 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/jpeg
Size: 1661 bytes
Desc: image001.jpg
Url : http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20091216/9cbf32f4/attachment.jpeg