Monitoring Internet and email

I support an NT4 Network. Win98 Clients. Various email clients (netscape,outlook, and some people using ICQ). The employees have been warned about misuse. The owner now wants to know where these people are surfing where they are emailing and even the contents of emails. Any suggestions? Is it legal? They are sharing a 3com LAN Modem hanging off the hub.