Question

Locked

Bandwidth Monitoring

By mpace ·
Hello there Techies,

I am looking for a solution to monitor users traffic. I would like to see real-time data on websites the users are on and the amount of bandwidth they are using. If available, I would love to have some sort of silent install on the user's machines, so that they are unaware of my intent. I have looked around and found lots that promised to do what I am trying to accomplish, but they all are disappointing in the end.

Thanks!!

This conversation is currently closed to new comments.

11 total posts (Page 1 of 2)   01 | 02   Next
| Thread display: Collapse - | Expand +

All Answers

Collapse -

eBlaster

by robo_dev In reply to Bandwidth Monitoring

Can log every keystroke, web page, chat session and send emails periodically to you. Totally stealth install.

If you're not quite at that level of mistrust just yet, a content filtering proxy server like Rhinosoft AllegroSurf could do the trick.

Collapse -

- A bit like a Peeping Tom you mean ? ...

by OldER Mycroft In reply to Bandwidth Monitoring

Well, in order to render a modicum of normality, to reduce the degree of the world's view of the sleezy habitual 'perv' - perhaps you could expound on what exactly you would like to see of these websites that your hapless users would be on.

As to the lots you have found that have promised to do what you are trying to accomplish but have all ended up disappointing, that is the very nature of the sites that you are probably wanting to peep in on anyway.

My advice to you - drop the Pr0n and get a life.

Collapse -

It's somewhat cruel to monitor without doing any restrictions

by robo_dev In reply to - A bit like a Peeping To ...

Most shops I've seen have a content filtering proxy (Websense, Baracuda) that logs everything, and will deny most things that people would expect to be denied.

By not doing ANY content filtering, then doing hidden stealth monitoring, that's like leaving some gold coins on a table in the park, then shooting the first person who palms one.

Collapse -

Query for robo_dev

by nepenthe0 In reply to Bandwidth Monitoring

OK, I'm just an ordinary loyal motivated employee who needs ~3-4 hours a day to check my e-mail, transact a few securities trades, watch some videos and get sufficiently relaxed so that I can do my job competently.

Now robo_dev stealthily installs eBlaster on my workstation. I'm not supposed to download and install any antispyware software without Management's permission.

So my question is: under what process does eBlaster appear when I open the Task Manager and peruse the running tasks?

Now don't think I'm paranoid just because I'm what Management terms marginally efficient. I just want to protect my right to get paid without working.

Thanks.

Rick/Portland, OR

Collapse -

So stealthy it's scary

by nepenthe0 In reply to Query for [i]robo_dev[/i]

This is a direct quotation from the e-Blaster web site:

"eBlaster does not show up as an icon, does not appear in the Windows system tray, does not appear in Windows Programs, does not show up in the Windows task list, cannot be uninstalled without the eBlaster password you specify, and e-Blaster does not slow down the operation of the computer it is recording."

http://tinyurl.com/62a7j8

Utterly chilling.

Rick/Portland, OR

Collapse -

Cool huh?

by cmiller5400 In reply to So [i]stealthy[/i] it's s ...

Now just think of a virus that does this...

Collapse -

Is there an effective vaccine?

by nepenthe0 In reply to So [i]stealthy[/i] it's s ...

Since one is hard pressed to detect the presence of this nefarious keylogger spyware, I wonder if the better antispyware applications (such as Spybot Search & Destroy) will block eBlaster installation. Any thoughts?

Rick/Portland, OR

Collapse -

It runs with a hidden 'guardian' process

by robo_dev In reply to Query for [i]robo_dev[/i]

The software runs in stealth mode using a hidden guardian process, so you don't see it in task manager.

The way it works is it only sends a burst of emailed data at periodic intervals, so unless you're watching the PC with a sniffer, you won't notice the outbound traffic or established session).

It sends the data as a BHO from the web browser and sends it using standard smtp, so a personal firewall will not block it.

I've looked at a PC running eblaster while sniffing the ethernet connection, watching the processes with process explorer, watching the registry and files (regmon/filemon) etc.

Eblaster can be spotted by a VERY technical user if they know exactly what to look for.

Eblaster is technically not spyware, it's surveillance software. Most anti-virus and anti-spyware software specifically gives it a pass because it is commercial software.

I've used the package (legally) for two fraud/embezzlement investigations and it resulted in one person being cleared of involvement in one scheme, and one victim getting her $40,000 investment back.

http://www.pcworld.idg.com.au/index.php/taxid;2136212789;pid;4604;pt;2

Collapse -

Thanks, you answered my question

by nepenthe0 In reply to It runs with a hidden 'gu ...

The FBI uses similar techniques for supposedly authorized surveillance, a classified application known as Magic Lantern.

Ostensibly with search warrant authorization, an innocuous-appearing e-mail is sent with a likewise innocuous-appearing attachment. Upon clicking the attachment, keylogger surveillance commences.

Because the results are sent in a packet burst upon the next boot cycle (before the user has access to the operating system), it doesn't qualify as real-time monitoring, and therefore is exempt from restrictions imposed on telephone tapping.

Rick/Portland, OR

Collapse -

Thanks!!

by mpace In reply to Thanks, you answered my q ...

I appreciate everyone's 2 cents on this. I am looking further into the e-blaster solution. I would like to test, but it doesn't seem to have a demo trial version.

Back to Networks Forum
11 total posts (Page 1 of 2)   01 | 02   Next

Related Discussions

Related Forums