At it's simplest you could just make use of the built-in syslog service -- direct it to a machine running the free version of the Kiwi syslog daemon. A little step beyond that is to use NetIQ's Webtrends. Of course, the above requires that Netscreens syslog implementation be configurable at different priority levels. If it's a fixed level, whatever level they've chosen may not be high enough to capture the type of data you want. The other side of this is if they've got syslog running in debug mode. In that case you'll get more data than you really want and depending on what bandwidth you push through the firewall, you'll almost certainly need a util (like Webtrends) to weed through the morass.
Beyond that, certainly a sniffer will tell you what you want to know. just a thought kj Quoting Eric Dami <[EMAIL PROTECTED]>: > I may be a little off subject, but I am wondering if anyone knows of a > product that will tell me where my users are going on the internet. I am > currently running Netscreen firewalls and am looking for a product that will > tell me what computers are going where. > > TIA, > > Eric Dami > MCSE/MCSA > LAN Administrator > Telephone Credit Union of NH > [EMAIL PROTECTED] > (603)645-8103 > > > > > > > NOTICE: This e-mail communication (including any attachments) is covered by > the Electronic Communications Privacy Act, 18 U.S.C. 2510 et seq. and is > CONFIDENTIAL. The information and work product contained herein are > PRIVILEGED and intended only for disclosure to or use by the person(s) listed > above. If you are neither the intended recipient(s), nor a person responsible > for the delivery of this communication to the intended recipient(s), you are > hereby notified that any retention, dissemination, distribution or copying of > this communication is strictly prohibited. If you received this communication > in error, please notify me immediately by using the "reply" feature and then > immediately delete this message and all attachments from your computer. Thank > you > > > Please visit http://www.ipswitch.com/support/mailing-lists.html > to be removed from this list. > > An Archive of this list is available at: > http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/ > ------------------------------------------------- This mail sent through IMP: http://horde.org/imp/ Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/
