Groupwise snoop

[DaYooper]

I am a technology person at a rather large high school. Part of my job is to maintain some sort of semblance of order with students on the internet and working with Groupwise (they call me the Internet Nazi)

I am in need of a simple tool that will allow me to detect certain inappropriate words (you can imagine the list) that students use in email. Upon discovery, I'd need a list of the users that used them.

Right now the kids are getting away with bloody murder. The accounts are NOT their personal property, and they agreed to the lack of confidentiality when they signed up for the account. Anyone have any suggestions out there?

 

[AZeemeri]

Carnivore lol

To stick to Sniffer...
You can create filters that 'look' like a carnivore system.

Roughly:
Build a boolean filter that matches this pattern where 10.10.10.10 is the suspected ip:
--source 10.10.10.10
or[
--dest 10.10.10.10
and

--dest port 25 (SMTP)
0r[ --dest port 110 (POP3)
--dest port 143 (IMAP)

Maybee more of a herbivore

 

[AZeemeri]

Forgot to mention source (thank you Laura from packet-level.com)