Web traffic Monitor/Logging

_Kaiser_

Anyone have any recommendations for software (freeware or cheap ideally) that would allow me to actively monitor and log websites accessed by users on a Win2003 based domain?

Static M.e.

We use SurfControl, Simple to use, not sure of cost.

let me know if you want screenshots or anything of the sort

Thomas_S_Hunterson

I think Ethereal is out on windows, and is free + very powerful.

Well worth a look http://www.ethereal.com/

Mac daddy

Ethereals replacement
Wireshark
http://www.wireshark.org/

Cake Fiend

Ethereal/Wireshark could technically be used for this, but it's hardly ideal.

Is a web proxy an option? Something like Smoothwall (free) might do the trick.

_Kaiser_

Tried Wireshark but it doesn't seem the most user-friendly option (ta for the recommendation though).

SmoothWall looks interesting though.. all I need is an old PC, 2 network cards and the ISO image? Will give it a try!

NutJob

Make life easy for yourself
Use squid as a proxy.

http://www2.linuxjournal.com/article/4408

mick.fr

Squid is effective for what is has been designed but it is really poor when it comes to network integration with Win 2003 Servers and XP/Vista clients.

Web caching is one thing, but a biggest issue nowadays in my opinion, is more the ability to fully trace employees activities as company directors are liable for employees internet activities.

So that said, an effective reporting feature and a good black-list/white list engine such as WebSense or SurfControl (WebSense is acquiring SurfControl apparently...) installed on the TOP of ISA Server would accomplish this type of job. Way better than Squid. But is has a price. ISA Server would be around 1500 euro, while SurfControl you would need to add maybe 1000/2000 on the top...

voodoo

There are a few solutions for this. I also know that McAfee have an appliance that will do both email and web content filtering including gateway AV/Anti-Spyware all from one appliance. Think that the OEM from Secure Computing - Websense's number 1 competitor

NutJob

NutJob wrote:

Make life easy for yourself
Use squid as a proxy.

http://www2.linuxjournal.com/article/4408

Squid can use NTLM auth
jsut set ntlm_auth on

Add http://www.squidguard.org/
http://freshmeat.net/projects/calamaris/


He said free/freeware/cheap.

Thatll do the job and iv seen it work in a hostile enviroment (UNI)

sed

Although i wouldnt consider it cheap, i would recommend ISA. It's relatively easy to set up. you could have it up and running in 15 mins and it emails reports that are simple to read and understand. which is cushty to give to management that are non technical.:)

Fireworks

MrWilliam, can you send me a private message me please, I want to send you a private message to ask a question but don't know how to send a pm? So if you send me one I can reply. Thanks