Sounds like a job for snort (packet sniffer)! Note that in a switched network you may have to do some planning/config changes to get the (point to point) packets presented to it.
Cheers, Frank. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of [EMAIL PROTECTED] Sent: Wednesday, 13 October 2004 12:56 AM To: [EMAIL PROTECTED] Subject: How to track use of VNC We've got about 400 users. Only our systems department has the passwords to VNC the machines, but we think someone might have gotten a hold of one or two of them. We've had a couple of users report problems with the VNC icon going black, and people remoting their PCs without their permission. No Systems staff admit to being the ones to do it. It might be an honest mistake, it might be something more nefarious. Does anyone know of a way we can track what IP the request to VNC came FROM? Is there a log on the local computer we can use to check? Is there any software that scans for VNC traffic on a network and logs it? Daniel J. King Helpdesk and Technical Support HB Group Insurance 905-507-5602 [EMAIL PROTECTED] This message is intended for use only by the individual(s) to whom it is specifically addressed above and should not be read by, or delivered to any other person. Such material may contain privileged and confidential information. IF THE READER OF THIS MESSAGE IS NOT THE INTENDED RECIPIENT YOU ARE HEREBY NOTIFIED THAT ANY DISSEMINATION, DISTRIBUTION OR COPYING OF THIS COMMUNICATION IS STRICTLY PROHIBITED. THANK YOU FOR YOUR COOPERATION. CE MESSAGE EST DESTINC SEULEMENT C LA PERSONNE DC SIGNC E ET PEUT CONTENIR DES RENSEIGNEMENTS CONFIDENTIELS. Sbil ne sbadresse pas C vous, PRICRE DE NE PAS copier, distribuer, ni utiliser les renseignements sby rapportant. Si vous avez reC'u cette TC LC COPIE par erreur, veuillez tC)lC)phoner immC)diatement C lbexpC)diteur pour lben aviser. Merci de votre collaboration. _______________________________________________ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list _______________________________________________ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
