🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: fj.net.lan.ethernet
Article #57

Ethereal Capture-Filter for web address filtering?

#57
From: Felix Eggbert
Date: Mon, 25 Oct 2004 13:47
21 lines
1654 bytes
Hello,

I guess this question must have been asked before but I haven't found 
any answers. My boss has told me to find out which web addresses within 
the company are surfed to when he is on holidays.

The network is handled by a w2k server. For the stations the server acts 
as gateway whereby it is forwarding internet traffic to a router which 
is connected to the dsl line. So every traffic passes the server. I 
installed Ethereal and played around a little bit. I already found out 
how to filter all traffic on port 80. But of course this only returns 
the data traffic between the two computers ip-addresses.

I guess I have to filter just the requests of the workstations to the 
dns server, haven't I? With this I could theoretically see which 
addresses are to be solved, am I right? How do I do this/which port do I 
filter for name resolution?

Thanks and best regards,

Felix Eggbert, Germany
Technical Details
Message-ID: <2u4efdF25pk1uU2@uni-berlin.de>
Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!fu-berlin.de!uni-berlin.de!not-for-mail

Show Full Headers
Complete Article Headers
X-Google-Thread: fb155,bdb66141c312e2be,start
X-Google-Attributes: gidfb155,public
X-Google-Language: ENGLISH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!fu-berlin.de!uni-berlin.de!not-for-mail
From: Felix Eggbert <eggbert@phez.com>
Newsgroups: fj.net.lan.ethernet
Subject: Ethereal Capture-Filter for web address filtering?
Date: Mon, 25 Oct 2004 15:47:31 +0200
Lines: 21
Message-ID: <2u4efdF25pk1uU2@uni-berlin.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: news.uni-berlin.de 3zQ/ckWs/b0Q1+cA/TBYLgVnfPwyws6s4f3xM0n0xDZA==
User-Agent: Mozilla Thunderbird 0.8 (Windows/20040913)
X-Accept-Language: de-DE, de, en-us, en