Eavesdropping on a port or socket

Discussion in 'Port Explorer' started by sharjohn, Dec 22, 2004.

Thread Status:
Not open for further replies.
  1. sharjohn

    sharjohn Guest

    If I do a record or spy on a socket or port, can anyone on the network become aware that this is happening? Is it transparent? I want to track the inappropriate use of my company's bandwidth by a network employee. Would they be able to determine that this review is going on while they are on the network or by reviewing any logs? This is obviously not my area of expertise, but this is what I have been tasked to do. Please excuse what must seem like a dumb question to you network guys. Can you refer me to a section that would help me learn how to do this?
  2. Jooske

    Jooske Registered Member

    Feb 12, 2002
    Netherlands, EU near the sea
    Hi there!
    Dumb questions don't exist here, so don't worry.

    What you're doing on your computer or network another user can't notice, so go ahead spy on the nasty user!
    Mind you: the capture.bin is growing fast, so you might like to save it away with another name for future review / proof and Port Explorer will create a new one when needed.
    You will like to use the log file as well, and occasionally saving the table, all as proof.

    I'm only thinking: how to get the processes on his system in your Port Explorer GUI?
  3. CrazyM

    CrazyM Firewall Expert

    Feb 9, 2002
    BC, Canada
    The socket spy in PE will only monitor traffic for the system on which it is installed. For your scenario you might want to look at logging options at your company firewall/router and/or apply restrictions there.


Thread Status:
Not open for further replies.