How to monitor LAN login and other LAN activities?

Discussion in 'Server Networking' started by Mehbs, Jun 12, 2007.

  1. Mehbs

    Mehbs Guest

    I want to keep track of login information. I want to know who logged in at
    what time and if possible, need to know the activities .

    Is there any software that I can install to watch my network activities etc?
    Mehbs, Jun 12, 2007
    1. Advertisements

  2. Mehbs

    Herb Martin Guest

    To log domain Logons by users you can just enable "Account Logon Auditing"
    on the DCs, i.e., in a GPO.
    You can watch network activity itself with a sniffer or Network Monitor --
    Microsoft provides NetMon free with each Server but there is a better
    version (3.0) also free on their website.

    WireShark (formerly known as EtheReal) is a popular open source
    network capture and analysis tool and you can find others through this
    site: on their favorite network tools link list page

    For MONITORING a network over long periods to watch for illegal
    or undesired behavior and problems you might prefer an IDS (Intrusion
    Dectection System) -- there are quite a few similarities between a
    network monitor/packet capture and an IDS but they are tuned and each
    is designed to optomize the particular role.

    WinSnort (a play on Snort == big Sniff) is popular as is it's ordindary
    Snort (linux etc) cousin.
    Herb Martin, Jun 12, 2007
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.