How to monitor LAN login and other LAN activities?

Discussion in 'Server Networking' started by Mehbs, Jun 12, 2007.

  1. Mehbs

    Mehbs Guest

    I want to keep track of login information. I want to know who logged in at
    what time and if possible, need to know the activities .

    Is there any software that I can install to watch my network activities etc?
     
    Mehbs, Jun 12, 2007
    #1
    1. Advertisements

  2. Mehbs

    Herb Martin Guest

    To log domain Logons by users you can just enable "Account Logon Auditing"
    on the DCs, i.e., in a GPO.
    You can watch network activity itself with a sniffer or Network Monitor --
    Microsoft provides NetMon free with each Server but there is a better
    version (3.0) also free on their website.

    WireShark (formerly known as EtheReal) is a popular open source
    network capture and analysis tool and you can find others through this
    site: Insecure.org on their favorite network tools link list page

    For MONITORING a network over long periods to watch for illegal
    or undesired behavior and problems you might prefer an IDS (Intrusion
    Dectection System) -- there are quite a few similarities between a
    network monitor/packet capture and an IDS but they are tuned and each
    is designed to optomize the particular role.

    WinSnort (a play on Snort == big Sniff) is popular as is it's ordindary
    Snort (linux etc) cousin.
     
    Herb Martin, Jun 12, 2007
    #2
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.