Monitoring LAN

Hi Guys,

Do you have any ideas how to monitor your LAN? Like for existing virus that exist in PC and infects other PC via network?

Appreciate your feedback. Thanks in advance.

Cheers!

Sounds like you're talking about network-based IDS. This is a system which monitors the traffic flowing on your network and will raise an alarm if it detects packets with particular byte-sequence signatures in them. IDS options range from free public domain to comercial megabucks offerings. I suggest you start at the free end and install something like Snort so you can condict an evaluation

Thanks TheBishop, I'll take note of that. Does it have any impact on my network like bandwidth usage?

Guys any more ideas to share? I believe all of us need this kind of tools.

Thanks in advance again.

No. Typically you'd create a port mirror on your central switch stack to replicate (say) all the traffic on your connection to the outside world/server farm/main VLAN/DMZ/whatever you want. The destination of this would be the box your IDS runs on. So you're not creating any additional traffic to do this

Which free IDS systems do you suggest?