RE: monitor traffic on host

["TVB NOC" <tvbnoc () temeculavalleybank com>]

You can try and setup Netflow, which will tell you source and
destination, plus tell you the applications they are using to
communicate. 

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Kelly Keeton
Sent: Friday, September 14, 2007 7:41 PM
To: security-basics () securityfocus com
Subject: monitor traffic on host

I have a issue where I have been asked to monitor all web traffic on a
employee. I need to as quick as possible set up a transparent device
that will monitor and log all web traffic in the clear. anything sent
or rx over the network. ideally it would also monitor smtp, ft, etc. i
need real time reporting so tcpdump wont work, snort also i dont think
is the correct answer. is there any "prebuilt" knoppix or vm-appliance
that will accomplish this?