Okay, I have been trying to easily index and report on the websites vistied by users on my network. I have tried untangle, which is AWESOME, BUT, doesnt play well with my network since I have mulitple subnets. Or my voip phones (because of the subnet issue)
I have thought about squid, but it’s a caching/proxy. Do not want to redirect everything. Or have a server inline (Untangle)
I would just really like to port mirror evertything to an ip and the machine at that ip grab the data and report on it. Tried wireshark, but it doesnt report that way I want.
Untangle has the best reporting, just sucks it wont work well with my net and wants to be inline, i.e; Router–>Untangle–>Switch
I have tried PRTG and it doesnt report good at all.
I have splunk but it cant take in data on specfic interface, i.e, port mirror to the splunk server.
Any ideas? Thanks for the help.
PS. Trying to use open Source here.