Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I need to monitor and log network activities of a specific software installed on my system.

I know there are lots of network monitoring software out there, even system explorer has one built in.

I need a Windows-based application I can run in the background, it should collect the network traffic of a process software or a set of processes.

share|improve this question

closed as off-topic by Noordung, AviD Jan 9 at 9:00

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

2  
This sounds like it'd quickly fill up your disk. What's your end goal? Seems like something an IDS / IPS might be better for. –  Polynomial Apr 3 '13 at 10:15

3 Answers 3

Microsoft Network Mintor or NetMon for short allows you to monitor/log/analyze network traffic.

After you start capturing, you can specify a process and monitor the network activity of that process.

NetMon_Processes

If you just want to know the IP addresses, ports, and protocols used by the process, you can try something like this in the command prompt

netstat -ano | findstr PID

You can get the PID either from your Windows Task Manager, or with the following command

tasklist | findstr /i PROCESS_NAME
share|improve this answer

Nagios should be able to do the job for you (although like you said there are plenty to choose from).

You have an agent running in the background collecting data, then you can view reports and be notified when certain things happen (like services going down etc).

http://www.nagios.org/about/features

Comprehensive Monitoring

Capabilities to monitor applications, services, operating systems, network protocols, system metrics and infrastructure components with a single tool Powerful script APIs allow easy monitoring of in-house and custom applications, services, and systems

Nagios works for windows, although I've only tried it on linux so far. Here is information about nagios for windows http://www.nagios.com/solutions/windows-service-monitoring

There are a number of plugins and reports available, this will give you a quick look at what you can expect http://www.nagios.com/products/nagiosxi/screenshots

Another bit of software to consider is OPSVIEW which takes advantage of nagios core but extends and adds other features http://www.opsview.com/technology/guides-help/monitoring-examples/opsview-nagios-users

share|improve this answer
    
Nagios doesn't seem like it solves the problem. It seems that OP wants to monitor the traffic itself, rather than system state. –  Polynomial Apr 3 '13 at 10:14
    
There are plugins for nagios, and opsview is built off nagois core so I believe this is possible, I'm just not sure how easy it is. OPSVIEW has a forum which might be helpful, e.g ... opsview.com/forum/opsview-community-edition/… –  Drew Khoury Apr 3 '13 at 12:05

I think you can try Net Orbit monitoring software once. It records and monitors all the activities of employee PC. It can also provides you live monitoring of the employee PC. So it will helps you in detecting all the problems at workplace.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.