[cowboybop]

I have a question regarding network monitoring. Basically, how does it work, and are there any ways I can protect myself from it?
I use a gigabit ethernet connection at work, and don't like the Orwellian idea of a systems administrator always being able to see what I am doing. Please note that the most nefarious thing that I do on "company time" is update my blog and read ESPN.com.

[clam2000]

network monitoring is keeping a record of all the data which goes through the router. rather then keeping all of the data most often only webpage addresses will be kept, rather then the full content of each page.

to prevent it: i would reccomend jap, it's a secure proxy, meaning that all the data which goes through the router will be encrypted, so it won't be easy to figure out what websites you went to.

--will

[kampl]

Originally posted by clam2000:
network monitoring is keeping a record of all the data which goes through the router. rather then keeping all of the data most often only webpage addresses will be kept, rather then the full content of each page.

to prevent it: i would reccomend jap, it's a secure proxy, meaning that all the data which goes through the router will be encrypted, so it won't be easy to figure out what websites you went to.

--will

I don't necessarily agree with this assessment as I have monitored hosts before on large scale networks. You can watch whatever traffic you want save for already encrypted traffic. If a host catches your eye you can go further in depth as to what they are doing across the network.

I do, however, agree with the suggestion of using an SSL enabled proxy if you can get to one from that network.

If you are already in a proxied environment, it is entirely possible that the administrators have already blocked access to the major/minor remote proxy services at which point you are SOL depending on what they do allow outbound and whether you have to go through their proxies using such and such service to reach such and such destination.

[ghporter]

There is SO MUCH data flying through any corporate network, even a small one, that it is nearly impossible to "watch someone surf." What typically happens is that IT installs monitoring software on the company switches and routers to look for specific URLs or IPs. If a user hits sites on the "bad list" too often, a report is generated and the IT managers start looking. Your corporate policy on Internet use should outline what is and is not allowed, including what sites are forbidden-like online porn and gambling sites. If you don't trip those alarms, you probably won't have

On the other hand, using your own private proxy will likely set off alarm bells right away. It shows that you're trying to hide something, and that's always a bad thing when you're using someone else's equipment and connections. Face it, the company owns the Internet connection you use at work, and probably the computer you're using too, so they can legally say what you may and may not do with them. If you make it obvious you don't want to be observed, you are going to be "talked to."