I'm busy with a project to see to what sites employees are going. I downloaded and installed Ntop. But Ntop isn't what I'm looking for. What I want is a programma or script that check what PC (by IP) visited a website. Both things need be exported to a database. I already tried a few simple things with tcpdump but the output is still not what I want.
Can anyone help me or get me started with it?
If it were me doing this, I'd install Squid and put it in transparent proxy mode, turn the logging up, and produce graphs of all the result. As an extra check, you could turn off port 80 (http) and port 443 (https) for outgoing requests from your lan at the same time, then everyone _has_ to go through your proxy (don't forget to keep access to the web open for your squid machine, though).
oke, thanks :)
I'll try it.