Network Monitoring

[Tom Buskey]

On 7/10/07, klussier at comcast.net <klussier at comcast.net> wrote:
>
> Hi All,
>
> I find myself in the dis-pleasing position of needing to monitor internet
> usage in one of our branch offices. I am looking for recommendations on
> packages for this purpose. What I need to do is put a box between the
> internal router and the firewall that will monitor the traffic and correlate
> it. I need to gather information on what internal IP addresses are accessing
> what websites, how often, etc. (you know, the usual disdainful big-brother
> type of information). Any suggestions as to how anyone else has done this
> would be appreciated, I guess....


I think a proxy server that produces standard apache logs (squid?  apache?)
and something like analog to do analysis.  Make the proxy caching so you get
some network speed up for the users.  You can usually have the firewall
redirect to the proxy transparently.

If it's all about blocking "bad" websites, subscribe to a service that does
that so you don't have to keep up with new sites.  Dan's Guardian runs on
linux and has a blocklist subscription service.

I've
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.gnhlug.org/mailman/private/gnhlug-discuss/attachments/20070710/f5dc1b11/attachment.html