Article View: fj.net.lan.ethernet
Article #57Ethereal Capture-Filter for web address filtering?
From: Felix Eggbert
Date: Mon, 25 Oct 2004 13:47
Date: Mon, 25 Oct 2004 13:47
21 lines
1654 bytes
1654 bytes
Hello, I guess this question must have been asked before but I haven't found any answers. My boss has told me to find out which web addresses within the company are surfed to when he is on holidays. The network is handled by a w2k server. For the stations the server acts as gateway whereby it is forwarding internet traffic to a router which is connected to the dsl line. So every traffic passes the server. I installed Ethereal and played around a little bit. I already found out how to filter all traffic on port 80. But of course this only returns the data traffic between the two computers ip-addresses. I guess I have to filter just the requests of the workstations to the dns server, haven't I? With this I could theoretically see which addresses are to be solved, am I right? How do I do this/which port do I filter for name resolution? Thanks and best regards, Felix Eggbert, Germany
Technical Details
Message-ID:
<2u4efdF25pk1uU2@uni-berlin.de>Path:
arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!fu-berlin.de!uni-berlin.de!not-for-mailShow Full Headers
Complete Article Headers
X-Google-Thread: fb155,bdb66141c312e2be,start X-Google-Attributes: gidfb155,public X-Google-Language: ENGLISH,ASCII-7-bit Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!fu-berlin.de!uni-berlin.de!not-for-mail From: Felix Eggbert <eggbert@phez.com> Newsgroups: fj.net.lan.ethernet Subject: Ethereal Capture-Filter for web address filtering? Date: Mon, 25 Oct 2004 15:47:31 +0200 Lines: 21 Message-ID: <2u4efdF25pk1uU2@uni-berlin.de> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Trace: news.uni-berlin.de 3zQ/ckWs/b0Q1+cA/TBYLgVnfPwyws6s4f3xM0n0xDZA== User-Agent: Mozilla Thunderbird 0.8 (Windows/20040913) X-Accept-Language: de-DE, de, en-us, en