I'm on a lan in my apartment and i want to monitor what people are using off my computer and htpc. Is there be a way to monitor outgoing packets, and what ip address they're going to? Would the first packet contain the filename? Would something like wireshark work?

-SMB sniffer maybe? Or maybe a file I/O recorder? I don't know.

[Edited on November 10, 2008 at 5:51 PM. Reason : .]

11/10/2008 5:29:33 PM

iptables would be perfect for this

11/10/2008 6:19:15 PM

^too complicated and i thought iptables was for linux. I messing around with Process Monitor from Microsoft. It kinda works but it tells me every single file I/O and it's too hard to filter everything out to see just what i want. I just want a simple little sidebar gadget that tells me what files are being accesses from a specific directory!!!

11/10/2008 6:27:51 PM

so you are a shared directory and you want access logs from it to see what your roommates are taking out of it.

Is there a prevailing reason you want to do this. And whats your share medium

11/10/2008 6:36:10 PM

Well my desktop and htpc are used as a media server, and the roommates are always watching movies/tv shows out of it. I want to see what they're watching. I'm able to use a file I/0 monitor to see the file once it's started (the first packet will tell me the file being used), but it seems that there should be a simpler way to see what's being accessed from a particular shared directory on my computer without having to sort through all the file i/0 for that drive.

Ideally i just want a little gadget/widget thing that tells me what file is being accessed and to what ip on the network it's going to. You'd think someone would have created this already.

11/10/2008 6:51:59 PM

I've used file system auditor by scriptlogic before..give that a shot. although after the 30 day trial you'll have to find something *cough cough* else

[Edited on November 10, 2008 at 7:23 PM. Reason : also, right click my computer, manage, shared folders, open files..bam]

11/10/2008 7:23:16 PM

http://www.wireshark.org/

[Edited on November 10, 2008 at 9:17 PM. Reason : ,]

11/10/2008 9:15:18 PM

Quote :

"http://www.wireshark.org/"

set up some capture filters and use the winpcap driver, and bam, you're good

11/10/2008 9:49:51 PM

Quote :

"also, right click my computer, manage, shared folders, open files..bam"

Nice that does the trick. Very simple too. Although it doesn't tell me which user is using it. Just "guest".

My roommate suggested wireshark with filters. I will be able to see the file being accessed?

[Edited on November 10, 2008 at 10:15 PM. Reason : .]

11/10/2008 10:13:17 PM

yeah. my other way works too..although might be more complicated, i dunno

11/10/2008 10:24:22 PM

why dont you just add very limited accounts for your roommates and have them login

11/10/2008 10:26:58 PM

http://www.oxid.it/cain.html

Might as well get all their passwords too

11/10/2008 10:48:24 PM

i like to watch the LEDs on my NIC.

11/11/2008 2:19:18 AM

this seems like a lot of squeeze for not much juice.

11/11/2008 8:44:03 AM

Kelly concurs.

11/11/2008 9:13:16 AM

aha, definitely one of my all time favorite movie quotes.

11/11/2008 1:47:24 PM

Quote :

"I will be able to see the file being accessed?"

you'll be able to see the request that's sent to your computer for the file, which contains the filename.

11/11/2008 9:15:26 PM