Does anyone know a program with which a sysadmin could read all the IM conversations and everything that is accessed from the network he adiministrates?
I'm not a sysadmin but I want to find out if my sysadmin is doing this. So I need to get familiar with these kind of tools.
Thera are a lot of tools for it, for example sniff, ... there are a good book talking about it: "linux hacking" but i think that ir realy dificult to know if admin is using some of this tools, the tools only listen and don't say anythink.
Tivoli Netview is very powerful program for wins. You can even generate statistics for every employee and even reconstruct credit card payment sessions.
For linux tcpdump is very raw utility, but there are many other sniffers. Some of them can even sniff ssh1 !
Of course keep in mind that if you are on a switched network you will not see anything but yourself and people talking to you. You sysadmin can of course mirror other users network ports to his own if he has access to the switches. Ahhh encryption..... the only way to sort out curious sysadmins!