Is there a plugin to do this; protocol useage

[StarLog]

I want to be able to see what websites my employees go to, from our firewall logs sent to cacti's syslog plugin. The other thing is I want to know who went where, and by what protocol.

[gandalf]

I suppose you should have a look at ntop, that seems to fit better.
R.

[Howie]

Or netflow.

But neither work from the firewall logs. Ntop is a packet sniffer and netflow uses data supplied by your router (if it supports it).

[StarLog]

Thanks will check both out.

[ioerr]

，iI‘m looking for this for some days。If you have the answer, give me a mail or any message,ok? thank U!

[Hyperlord]

You can do this with ntop, as already mentioned. But that "what pages my users goto" isn't possible with that. You might want to add a squid proxy to your network and generate reports with calamaris or something like that.

Anyway, why do you care where your people surf to? Just make it impossible for them to go to pages, you don't want them to (like blocking with blacklists - again with proxy).
You don't work in China, do you?

[ioerr]

You can do this with ntop, as already mentioned. But that "what pages my users goto" isn't possible with that. You might want to add a squid proxy to your network and generate reports with calamaris or something like that.
...........
You don't work in China, do you?

oh，haha:D . I'm from china exactly，

I want to do this just for personal interest ,only for Statistics and for studying perl。I'm only a admin ，not boss or leader. I want my brothers to go anywhere freely.

I‘m not like GFW too。

[Hyperlord]

Hehe yeah chillout

I installed nTop on one system lately - you can do a domain overview, but I would rather prefer to use a proxy for that entire web-logging. Have a look at Squid, you can monitor the process itself via SNMP, too (just do a search here in the forums, you'll find many nice templates).

But be so kind and inform the users that use your proxy, that you do logging.

kind regards,
Hyperlord