Hi all,
Concerning user auditing, I have developped a tool which permits an automatic insertion of accounting data in a MySQL database. The system works either under Windows Server, Linux, Solaris or Windows XP.
Doing a daily extraction of logs I insert them in the database, and perform a consolidation.
With this I'm able to extract information about a user over a longer period. This allows me for example to see if some behaviour are unusual.
In order to identify if users are going to unallowed sites I can use the data base for searches. Keyword search, or domain names are possible.
In my daily work it has shown in several occasions as a really usefull tool.
Now if anybody is interested, I will agree to share this software and installation information. Anybody interested, just drop me an e-mail and I will contact you.
Bye for now
Christian
calt@tla.ch http://www.tla.ch