On Thu, May 27, 2004 at 11:26:11AM +0800, william villanueva wrote: > We are tried to limit our network's internet usage by using squid and acls > using ip address. The problem is that some guy knows which ip address > belonged to whom and has been using their ip address when its the ip > address owner's day off. Is there a way to find out which computer he used > for the "crime"? > > If not, is there a way to monitor them without using the ip address and > being obvious? Keyloggers and monitors will not work as the guy knows to > scan for them.
William, you can try using arpwatch to monitor MAC address to IP address binding. eric -- ___ Eric Pareja (xenos AT upm.edu.ph) | Information Management Service [IMS] \e/ Network and Systems Administrator | University of the Philippines Manila _v_ ~o~o~o~o~o~o~o~o~o~o~o~o~o~o~o~o~o~o~o~o~o~o~o~o~o~o~o~o~o~o~o~o~o~o~o~o~ "Even the smallest person can change the course of the future." -Galadriel -- Philippine Linux Users' Group (PLUG) Mailing List [EMAIL PROTECTED] (#PLUG @ irc.free.net.ph) Official Website: http://plug.linux.org.ph Searchable Archives: http://marc.free.net.ph . To leave, go to http://lists.q-linux.com/mailman/listinfo/plug . Are you a Linux newbie? To join the newbie list, go to http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie
