Re: What is best way to log all traffic on a windows box?

["List Spam" <listspam () gmail com>]

Forget about using anything on the XP box.  If you have reason to not
trust it in the first place, you have reason to believe that anything
you do on that box is already being logged by someone else and/or
being disrupted.

Stick something in the way of the box's first link to the network -
inline tap, port mirroring, etc. and sniff that instead.

On 8/11/06, kirvam () verizon net <kirvam () verizon net> wrote:
> Hi You'all,
>
> I would like to log traffic on a users XP box because I suspect a
> re-occurring worm is opening a back door.  Is there any consensus on which
> tool is best for this?
>
> All help is appreciated.
>
>
> Thanks!
>
> -kirvam
>
>
>
>
> --------------------------------------------------------------------
> mail2web - Check your email from the web at
> http://mail2web.com/ .
>
>
>
> ---------------------------------------------------------------------------
> This list is sponsored by: Norwich University
>
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The NSA has designated Norwich University a center of Academic Excellence
> in Information Security. Our program offers unparalleled Infosec management
> education and the case study affords you unmatched consulting experience.
> Using interactive e-Learning technology, you can earn this esteemed degree,
> without disrupting your career or home life.
>
> http://www.msia.norwich.edu/secfocus
> ---------------------------------------------------------------------------

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------