Best way to log internet traffic for office network via remote IP

Posted by buzzmonkey on Server Fault See other posts from Server Fault or by buzzmonkey
Published on 2012-12-07T10:59:42Z Indexed on 2012/12/07 11:07 UTC
Read the original article Hit count: 146

Filed under:

monitoring

|

traffic

We have a network of about 40 machines running either Win XP or 7 in our office via LAN switches into 1 x Netgear Router (WNDR3700). We have noticed recently that our local network has been added to the CBL Blacklist due to one of our machines being infected with Torpig.

I have attempted to use Kaspersky's TDSSKiller Antirootkit Utility to find the infected machine but all appear to be clear.

The CBL register advises to find the local machine which is connection to the remote IP address (CBL has provided the range). However, our router does not have the ability to block remote IP addresses - does anyone know of a software which can log all the internet traffic, which we can then use to find the infected machine.

© Server Fault or respective owner

Related posts about monitoring

Issues with signal handling [closed]

as seen on Programmers - Search for 'Programmers'
I am trying to actually study the signal handling behavior in multiprocess system. I have a system where there are three signal generating processes generating signals of type SIGUSR1 and SIGUSR1. I have two handler processes that handle a particular type of signal. I have another monitoring process… >>> More
JMX Based Monitoring - Part Two - JVM Monitoring

as seen on Oracle Blogs - Search for 'Oracle Blogs'
This the second article in the series focussing on the JMX based monitoring capabilities possible with the Oracle Utilities Application Framework. In all versions of the Oracle utilities Application Framework, it is possible to use the basic JMX based monitoring available with the Java Virtual Machine… >>> More
JMX Based Monitoring - Part Three - Web App Server Monitoring

as seen on Oracle Blogs - Search for 'Oracle Blogs'
In the last blog entry I showed a technique for integrating a JMX console with Oracle WebLogic which is a standard feature of Oracle WebLogic 11g. Customers on other Web Application servers and other versions of Oracle WebLogic can refer to the documentation provided with the server to do a similar… >>> More
JMX Based Monitoring - Part Four - Business App Server Monitoring

as seen on Oracle Blogs - Search for 'Oracle Blogs'
In the last blog entry I talked about the Oracle Utilities Application Framework V4 feature for monitoring and managing aspects of the Web Application Server using JMX. In this blog entry I am going to discuss a similar new feature that allows JMX to be used for management and monitoring the Oracle… >>> More
Keeping track of File System Utilization in Ops Center 12c

as seen on Oracle Blogs - Search for 'Oracle Blogs'
Enterprise Manager Ops Center 12c provides significant monitoring capabilities, combined with very flexible incident management. These capabilities even extend to monitoring the file systems associated with Solaris or Linux assets. Depending on your needs you can monitor and manage incidents, or you… >>> More

Related posts about traffic

Windows Server traffic monitor that show traffic for each connected IP

as seen on Server Fault - Search for 'Server Fault'
I would like to see traffic in bytes of individual users (IP's) in real time. Logging would be good too. Additionally I would like to see which process (CGI.exe, php script etc) they are connected to or minimally what the GET/POST request was. I have looked at many server monitoring tools but have… >>> More
Can software traffic generator generate 100 Mbps traffic ?

as seen on Server Fault - Search for 'Server Fault'
Hello , Can software traffic generators like iperf etc can generate 100mbps traffic? else is there any software generators which can produce such high rates ? Regards, Mithun >>> More
Web Traffic - How Content Optimization Builds Web Traffic

as seen on Ezine Articles - Search for 'Ezine Articles'
When all is said and done, the one sure way of building on a website's traffic is creating, maintaining and updating your content. In most cases, content refers to features, information and images. So how do you optimize your websites content? Here is how. >>> More
tc: Linux HTTP Outgoing Traffic Shaping (Port 80 Traffic Shaping)

as seen on Internet.com - Search for 'Internet.com'
<b>nixCraft:</b> "How do I limit bandwidth allocation to http service 5Mbps (burst to 8Mbps) at peak times so that DNS and other service will not go down due to heavy activity under Linux operating systems?" >>> More
radius traffic accounting - what attributes do I use for traffic (and how)

as seen on Server Fault - Search for 'Server Fault'
we are building a web front end for a internet access token management system that uses radius (freeradius) queried from a captive portal. Reason for building this part is the integration into the accounting and billing platform that operates behind the scenes (all other parts are currently available… >>> More