[Pauldotcom] Web Traffic Monitoring à la Span Port

[Joe Magee]

Hey Everyone, 

 

I had a quick question, is there any good open source tools that do web traffic monitoring? (i.e. promiscuous mode eth interface off of a spans port?) I'm interested in doing some basic monitoring and ideally sending those logs to a SIEM tool. 

 

I know proxy's have this logging capability, however I was hoping to be able to snag it off the wire and possibly answer questions such as: What sites are my users visiting? How many hours per day are they browsing the internet?

 

Thanks in advance!

 

Joe

 

Joe Magee

Chief Technology Officer

Cell +1-617-921-8671

Office +1-201-324-1800 x202

 

  

securing and enabling dynamic business

www.thevigilant.com <http://www.thevigilant.com/> 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20091216/9cbf32f4/attachment.htm 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/jpeg
Size: 1661 bytes
Desc: image001.jpg
Url : http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20091216/9cbf32f4/attachment.jpeg