Best (simple) sniffer to use for detecting illegal filesharing on a network?

[shedlord2]

Hi,

Question says it all really. I've looked briefly at Ethereal but couldn't make sense of what I was seeing. I just need something that lists files shared by users or internal IPs, in a nice humanly readable way!

Anything out there that does this?

thanks

 

[fortunat]

In Wireshark, go to the statistics->Converstations table and you will see a list of ip addressesort number

I would sort by Bytes and see if the top ones are using legitimate port numbers

I have bunch of videos on my website;

http://www.thetechfirm.com

'Making things work better; bit by bit.'