Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Possible Duplicate:
Network Tracking

Hi all,

I am having fifty workstations which are connected to a windows server 2003 server and the internet is shared from the server .My question is , am i able to implement a tracking mechanism without using any proxy server and track all the web pages which ever visited by an individual workstation connected to a network?If possible how to achieve that kind of tracking mechanism?Some workstations do open their web pages in InPrivate browsing , can we access those browsing history?

share|improve this question

marked as duplicate by GregD, Bill Weiss, sysadmin1138, Jason Berg, RobM Dec 27 '10 at 16:53

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

You can use PRTG and set up a packet sniffing sensor bound to the internet connected NIC on the server. This will capture all inbound and outbound traffic to and from the internet.

share|improve this answer

if you use a switch you can setup a port monitor and sniff with wireshark all the packets.

share|improve this answer

What you need is something in-line if you don't want to use a proxy server. You can try something like a barracuda webfilter, that's what we used at my old job. Mostly for web filtering but it tracked all web sites visited as well, so you could run stats on them. You can also try an open source solution like untangle. Untangle Web Site

share|improve this answer

You're best bet would be to set something up like Squid as a transparent proxy to capture all of this traffic. There are a number of things you can do with pfSense like this to set it up as a sniffer or special purpose appliance if a proxy really just can't be configured in your network. But from the sounds of it you may want to look into tightening down that network a little more with a hardware or software firewall of some sort which will give you some of these functions.

I have done this at a couple offices using Squid and it's worked out very well.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.