Eavesdropping on a port or socket

If I do a record or spy on a socket or port, can anyone on the network become aware that this is happening? Is it transparent? I want to track the inappropriate use of my company's bandwidth by a network employee. Would they be able to determine that this review is going on while they are on the network or by reviewing any logs? This is obviously not my area of expertise, but this is what I have been tasked to do. Please excuse what must seem like a dumb question to you network guys. Can you refer me to a section that would help me learn how to do this?

[Jooske]

Hi there!
Dumb questions don't exist here, so don't worry.

What you're doing on your computer or network another user can't notice, so go ahead spy on the nasty user!
Mind you: the capture.bin is growing fast, so you might like to save it away with another name for future review / proof and Port Explorer will create a new one when needed.
You will like to use the log file as well, and occasionally saving the table, all as proof.

I'm only thinking: how to get the processes on his system in your Port Explorer GUI?

[CrazyM]

Originally Posted by sharjohn

If I do a record or spy on a socket or port, can anyone on the network become aware that this is happening? Is it transparent? I want to track the inappropriate use of my company's bandwidth by a network employee.

The socket spy in PE will only monitor traffic for the system on which it is installed. For your scenario you might want to look at logging options at your company firewall/router and/or apply restrictions there.

Regards,

CrazyM