If I do a record or spy on a socket or port, can anyone on the network become aware that this is happening? Is it transparent? I want to track the inappropriate use of my company's bandwidth by a network employee. Would they be able to determine that this review is going on while they are on the network or by reviewing any logs? This is obviously not my area of expertise, but this is what I have been tasked to do. Please excuse what must seem like a dumb question to you network guys. Can you refer me to a section that would help me learn how to do this?