Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

As a client computer, I am behind a router to which I have no access. Is it possible for me to know the domains or IP addresses that other clients visit?

I want to know which clients often download files because it really makes the network so busy.

My computer and other clients are in the same LAN (192.168.1.xxx).

share|improve this question
add comment

2 Answers

up vote 2 down vote accepted

Mayank Sharma advice is technically right but might not work in most of the environments because organizations/individuals use network switches nowadays which route data only to the intended recipient. Wireshark would work only where network hubs are used which broadcast the traffic to every node in the network.

In order to sniff traffic in switched environments you have to perform MITM (Man In The Midddle) through ARP poisoning. Once you perform MITM, you will be able to sniff data of the other nodes in a switch environment. I don't know if you are authorized to perform sniffing or MITM on the other machines so make sure you have prior approval.

In order to perform MITM you can use many open and closed source tools. Cain and Abel and Ettercap are two tools that are very easy to perform MITM. Cain and Abel is only for Windows platform while Ethercap works fine on both Windows and Linux.

share|improve this answer
add comment

Your question provides very limited information. It seems that you are in the same LAN as the people you are willing to monitor. In such a case in order to monitor the traffic you can use the Wireshark tool to capture packets and analyse all the unencrypted content (passive sniffing).

I am assuming that you are not in a switched network because then you will not be able to see the packets from your client machine. In such cases you may need to go for active sniffing techniques (e.g. MITM). Make sure not to violate any security policies that your organization has in place.

In your case simply looking at the DNS traffic you will be able to find out what websites people are trying to access. And then accordingly you will have to monitor individual IPs to find out who is consuming the bandwidth.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.