How capture DETAILED browsing history

tj White

Commendable
Jul 28, 2016
2
0
1,510
I need to capture browsing history on my network. I bought Open DNS, but it shows me nothing useful. I need a timestamped log os fites visited, and specific pages listed. Example would be facebook...Open DNS shows me that it was accessed 43 times, but doesn't list the specific pages so I cant see whose facebook page was visited.
History is being promptly deleted, so I can't view it locally on the devices.

I have a comcast modem, and a netgear router that is accessed by a PC and 2 iPads. I need something that will log these sites.
I dont want any tracking software on the individual devices that might be found.
The PC is not always powered on, so not sure if I could use anything that is PC dependent.

I was hoping there was some kind of device I could install inline between my modem and router that would capture the data.

Thanks in advance for your suggestions!!!
 
Solution
Your best bet is a proxy server that you force your users to use. Ie you block all direct access to the internet and only allow the proxy. This means the users if they want internet will be forced to use it.

You could also I suppose just put in a switch and use a simple mirror port and wireshark to capture the data. Huge pain when you need to search many 100s of gig of data.

Still neither will solve your facebook or many other sites. Since snowden revealed the government was doing something similar to what you are asking for many web sites have gone to using HTTPS. This means you only see the connection to the main ip you do not see the URLS anymore.

Now you can ..especially if you tell employees all traffic is...
Your best bet is a proxy server that you force your users to use. Ie you block all direct access to the internet and only allow the proxy. This means the users if they want internet will be forced to use it.

You could also I suppose just put in a switch and use a simple mirror port and wireshark to capture the data. Huge pain when you need to search many 100s of gig of data.

Still neither will solve your facebook or many other sites. Since snowden revealed the government was doing something similar to what you are asking for many web sites have gone to using HTTPS. This means you only see the connection to the main ip you do not see the URLS anymore.

Now you can ..especially if you tell employees all traffic is tracked...bypass the encryption. This is a man in the middle attack that requires you to have your own certificate server. Normally the browser will warn the users and prevent the connection but if you have your machines controlled with group policy you can rig it so your certificate server is trusted. Only the most advanced users will be able to tell you are doing this.

Of course these are the guys that will build a vpn to their house to prevent you from tracking them.
 
Solution