Security Basics mailing list archives

Re: What is best way to log all traffic on a windows box?


From: "Diarmaid McManus" <diarmaidmcmanus () gmail com>
Date: Mon, 14 Aug 2006 17:23:03 +0100

Kirvam,

To log _all_ traffic, i'd advise Wireshark(formerly Etheral). You can
filter packets by IP, source/destination ports, etc. www.wireshark.org

~Diarmaid.

On 11/08/06, kirvam () verizon net <kirvam () verizon net> wrote:
Hi You'all,

I would like to log traffic on a users XP box because I suspect a
re-occurring worm is opening a back door.  Is there any consensus on which
tool is best for this?

All help is appreciated.


Thanks!

-kirvam




--------------------------------------------------------------------
mail2web - Check your email from the web at
http://mail2web.com/ .



---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------



---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: