netmon application

  • Thread starter Thread starter Ryan DeMartini
  • Start date Start date
R

Ryan DeMartini

This page on microsoft's web site

http://support.microsoft.com/default.aspx?scid=kb;EN-US;148942

describes how to install the old network monitor on a 2000 box. This is
great if you follow the instructions they provide the software isnt on the
windows 2000pro cd. any ideas where it might be? baring that. the whole
reason I need it is because I need to track who is connecting to which
shares on some of our servers. Does anyone have a recomendation of a better
way to do that?

-Alex
 
I would not use netmon to do that or you will be looking at tens of thousands of
lines of packet exchanges. I would enable auditing of logon events on that server
which will keep track of who is accessing that server but not which particular share.
To actually audit a sure you will have to enable auditing of object access and then
enable auditing of the folder in advanced security properties which will generate a
lot of events in the security log, most of which will not seem related because a user
accessing a file can generate several related system events. If you do enable
auditing make sure to substantially increase the size of your security log in Event
Viewer. Sygate personal firewall also has extensive logging abilities which may be
used without actually using the firewall itself. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;300549
http://support.microsoft.com/default.aspx?scid=kb;en-us;301640
 
Ryan DeMartini said:
This page on microsoft's web site

http://support.microsoft.com/default.aspx?scid=kb;EN-US;148942

describes how to install the old network monitor on a 2000 box. This is
great if you follow the instructions they provide the software isnt on the
windows 2000pro cd. any ideas where it might be? baring that. the whole
reason I need it is because I need to track who is connecting to which
shares on some of our servers. Does anyone have a recomendation of a better
way to do that?

-Alex
Click to expand...

I have develop NetBiosSpy (free to try)exactly to do that at the
begining : http://www.netbiosspy.4t.com/
 
Back
Top