Network Monitoring

[Socal]

Not sure if this should be here, or in Servers forum.

What's the best way to monitor my Web Server connection? Using W2K Server and with .NET Framework. No FP or FP Extensions.

Basically, I want to see who's hitting me, in/out packets and from/to where...

[Socal]

Note: I've already got the Local Policies / Audit Policy audits set to Success/Failure.

What.. Where.. else...?

[Mntsnow]

Well you can always use a stats program such as AWSTATS and you will be able to see what IP's are requesting info from your webserver.

[Socal]

Thanks, Mike.. but that wouldn't monitor ID (Intrusion Detection)
I was just reading this...

http://www.securitysearch.net/pages/article.asp?id=472

ever try it? Something similar to recommend I try?

I was kinda hoping I could use something built-in (not third party).

Maybe SnifferPro.

[Mntsnow]

Yeah that would work too it would seem...Which program to go with just depends on what type of info your truly trying to glean

[Socal]

hmm.. some of the stuff here at Cotse looks interesting..

http://www.cotse.com/tools/netman.htm

http://www.cotse.com/tools/ids.htm

[Socal]

I'm using SnifferPro. Also interesting is that one can become Sniffer Certified (SCP/E/M) (http://www.sniffer.com/education/scpp.asp)! lol

And there's also a Sniffer Pro book (http://www.amazon.com/exec/obidos/tg/detail/-/1931836574/qid=1032031251/sr=8-1/ref=sr_8_1/102-0686035-9164939?v=glance&s=books&n=507846) which is pretty cool, so I decided to order it from Amazon. (Borders has it - for $50; Amazon is $15 cheaper.)

I prolly should've asked Doc if he has a coupon or discount!

:bunny:

[Mntsnow]

Well looks like we both Ordered the book :D