I am working on my Masters Project in which I am supposed to design a Network Monitoring tool which will identify the users in the network based on their network behavior.
I have a network setup with 4 systems connected to a Switch –> Router –> Internet. I connected another system to the same switch which will capture all the packets across the switch in promiscuous mode. Using Wireshark I captured the packets of all the 4 users in the network with 4 different IPs.
What are all the possible ways in which I can identify which user is using which system ??
