? for those in IT

[jerkbox]

my company just announced they are going to intensify net monitoring because of bandwidth issues.....

we are about 300 in size, how closely in your opinion would they be looking? or what would they be looking for? Think being on here all day would raise any flags? I use the stealth site and all...

i'm sure a lot of people are clogging up the network downloading big files and crap, but they did mention personal web surfing in the memo...

 

[the nature boy]

how big is your company? if it's not that big where you can go check with your IT guys as to what's going on, then do so.

 

[Y_lifter]

People STREAMING is the big one they will probably look for and hit first.

Just loading html is nothing compared to streaming music, especially
these days with CD quality available ..

 

[jerkbox]

hmmm...like i said it's about 300 in size....i don't really know any of the IT guys that well

 

[Y_lifter]

Our WAN/LAN started to slow due to bandwith issues.
I was told by our WAN / LAN guys after initial review of data types they see on our 130,000 person WAN that if they could block the NON Business pkts, our ATM WAN could have an additional 45% available bandw with no money spent...

 

[ChefWide]

if you are concerned about it, go ask them. If you are REALLY concerned about it, turn off images. That will lower your pipe sucking to an absolute minimum.

Asking is better... bribe them with food and drink. (i wish this was our company, you could just drop some GH on my desk and you would find yourself outside the firewall in about a half hour, LOL)

 

[TheProject]

Asking is better... bribe them with food and drink. (i wish this was our company, you could just drop some GH on my desk and you would find yourself outside the firewall in about a half hour, LOL)

Yep...take 'em out to lunch, or give 'em sodas...stuff like that. You probably won't get outside the firewall, but they'll at least tell you what they're looking for and you can probably convince 'em not to look at your stuff, provided you don't make yourself sound TOO interesting.

 

[The_Ghost]

They could be like me, I don't really monitor anyone, I just let them think I do. Fear is a great tool. I couldn't care less as long as they aren't doing anything too devious.

 

[the nature boy]

hmmm...like i said it's about 300 in size....i don't really know any of the IT guys that well

those are the guys to talk to. give the reach around if necessary.

 

[Y_lifter]

They could be like me, I don't really monitor anyone, I just let them think I do. Fear is a great tool. I couldn't care less as long as they aren't doing anything too devious.

Agreed,, they don't have time to actually monitor anything ..
This fear will reduce the bandw enough to make a difference..

Now a days we are way more concerned with keeping the network secure than people abusing it for personal use..

 

[jerkbox]

well, i can tell you i know some one was canned for downloading huge amounts of porn a while ago....

i guess that would raise a huge flag.....all i do is surf elite, occasionally check out some other sites.....AIM and email. nothing too bad....i generally don't download large files.

 

[The_Ghost]

Agreed,, they don't have time to actually monitor anything ..
This fear will reduce the bandw enough to make a difference..

Now a days we are way more concerned with keeping the network secure than people abusing it for personal use..

Aye, you got that right.

 

[Y_lifter]

well, i can tell you i know some one was canned for downloading huge amounts of porn a while ago....

i guess that would raise a huge flag.....all i do is surf elite, occasionally check out some other sites.....AIM and email. nothing too bad....i generally don't download large files.

I would bet almost 100% sure this person was not caught by random network monitoring. But rather they were probably seen / heard making a porn display around his/her area and mgmt became aware of what they were doing..
Then they went after the netlogs to prove it..

 

[The_Ghost]

I would bet almost 100% sure this person was not caught by random network monitoring. But rather they were probably seen / heard making a porn display around his/her area and mgmt became aware of what they were doing..
Then they went after the netlogs to prove it..

Exactly, the only time I go into the logs is when I am asked to by Management, at that point there is usually a reason and some known wrong doings going on.

 

[sh4dowf4lcon]

I would definately watch your emails and keep using the stealth site. Turn off images like someonme suggested. Also, you could try actually getting some work done. You and FZ, you bastards have way too much time on your hands for being at work, BigDawg too.

 

[jerkbox]

so, they generally don't use some kind of tools that would alert them that I am hitting elite 100x a day or something?

 

[The_Ghost]

I would definately watch your emails and keep using the stealth site. Turn off images like someonme suggested. Also, you could try actually getting some work done. You and FZ, you bastards have way too much time on your hands for being at work, BigDawg too.

Whaaaaaat, I am hurt!!!!!

 

[Y_lifter]

so, they generally don't use some kind of tools that would alert them that I am hitting elite 100x a day or something?

Yea.. generally
Unless you are noticed for some reason or piss them off first..

Being noticed would be to have your machines IP show up on a heavy hitter list that they probably run each week. You would have to be jamming on the net to beat out most routers.servers , so don't worry about that..

 

[Razorguns]

Here's a tip:

spend your day going to the same 4 or 5 sites. Doesn't matter you're there for an hour, etc.

What they don't like -- is seeing you going to 90 different sites a day. EAch day is different. That is CLEARLY jsut web surfing.

If you make it a nice habit of going to 4 or 5 same sites,d ay in, day out -- looks like a quick routine, and no one really notices.

 

[Dial_tone]

They're probably going to identify by quantity, not quality. They're going to look for people downloading large files (porn, music, software) because that will have the biggest impact. Once they identify those abusers then they'll try to figure out WHAT the person is downloading. You shouldn't raise any flags by surfing EF all day. Reading log files for a 300-person company just to see who's visiting monster.com would be a full-time job in and of itself.

 

[Code]

We do that here. And we look at the user level, see everything they type, everywhere they browsr and every application they launch.

We trend how long they browse non-work sites, we trend how long they play games for and we trend how much bandwidth they use.

my company just announced they are going to intensify net monitoring because of bandwidth issues.....

we are about 300 in size, how closely in your opinion would they be looking? or what would they be looking for? Think being on here all day would raise any flags? I use the stealth site and all...

i'm sure a lot of people are clogging up the network downloading big files and crap, but they did mention personal web surfing in the memo...

 

[strongsmartsexy]

Network abuse is very easily seen in the firewall logs. Especially those who spend their day just surfing. Huge bandwidth items include, pictures, audio, and video. If you have a large enough organization, they could all be listening to the same radio station and completely bog down the network.

 

[Code]

I can post up screen shots of the stuff if you're interested....

 

[strongsmartsexy]

We do that here. And we look at the user level, see everything they type, everywhere they browsr and every application they launch.

We trend how long they browse non-work sites, we trend how long they play games for and we trend how much bandwidth they use.

And what do you do with that?

 

[jerkbox]

I can post up screen shots of the stuff if you're interested....

go for it.


how big is your organization?

 

[Code]

Smooth Wall proxy server, ChildSafe (for keystrokes) and something called ApreoFlex.

And what do you do with that?

 

[strongsmartsexy]

Smooth Wall proxy server, ChildSafe (for keystrokes) and something called ApreoFlex.

I meant what do you do with the data and profiling?

 

[Code]

We send the logs of the folks who use the most bandwidth (actually it's a ratio of bandwidth to wasteful site/applications) to their manager/supervisor.

I meant what do you do with the data and profiling?

 

[TheProject]

Smooth Wall proxy server, ChildSafe (for keystrokes) and something called ApreoFlex.

How automated is the process? How many man-hours per week are dedicated to it?

 

[Y_lifter]

We send the logs of the folks who use the most bandwidth (actually it's a ratio of bandwidth to wasteful site/applications) to their manager/supervisor.

And what do they do with it ?

 

[Code]

It's 100% automated. I have a perl script that sits between the proxy and apreo that sends the weeks worst violator to their supervisor.

I assume the supervisor handles it. I try not to reign as a tyrant, just let the problem get handled administratively.

How automated is the process? How many man-hours per week are dedicated to it?

 

[The_Ghost]

We do that here. And we look at the user level, see everything they type, everywhere they browsr and every application they launch.

We trend how long they browse non-work sites, we trend how long they play games for and we trend how much bandwidth they use.

Damn what a waste of time.

I could't work for a company that was like Big Brother!

 

[Razorguns]

and u wonder why i got out of IT.

 

[Y_lifter]

I bet less than 50% of the data being sent is read or being sent the wrong Stupervisor

 

[strongsmartsexy]

Damn what a waste of time.

I could't work for a company that was like Big Brother!

Yes, and it's phenominal for moral.

 

[TheProject]

It's 100% automated. I have a perl script that sits between the proxy and apreo that sends the weeks worst violator to their supervisor.

I assume the supervisor handles it. I try not to reign as a tyrant, just let the problem get handled administratively.

Was this something that management requested, or did you do it proactively? Are the employees aware of it? I know they don't have to be - we notify our employees that the computers are company property, no right to privacy, etc. - but I suspect if we were logging keystrokes, and they knew about it, we'd have some ticked off people.

Also, how does this tie into your corporate data retention policy WRT lawsuits?

 

[The_Ghost]

Yes, and it's phenominal for moral.

no kidding eh, not a place for me.

 

[Y_lifter]

Was this something that management requested, or did you do it proactively? Are the employees aware of it?
Also, how does this tie into your corporate data retention policy WRT lawsuits?

I bet ya CODE really doesn't care..

 

[TheProject]

I bet ya CODE really doesn't care..

IT people usually don't...at my last job, the only surfing I cared about was when I caught someone surfing child porn.

Management, however, is always on the lookout for ways to "increase productivity"....or to have a ready excuse to whack someone.

 

[Y_lifter]

IT people usually don't...at my last job, the only surfing I cared about was when I caught someone surfing child porn.

Management, however, is always on the lookout for ways to "increase productivity"....or to have a ready excuse to whack someone.

Is it up and running ?
Have I resolved all my problem tickets within SLA ?
Is my Out of Office turned on for my Email and Phone ?
Do we still have 8 months before the Auditor comes in ?
When is the next out of town Conference in Vegas or Fla ?


This it what I.T. people care about..

 

[B0ARDIN087]

i think this forum is about fitness and IT, lotsa IT people here!

 

[Code]

I pushed to get a proxy, simply to block webmail. Because thats the only way a virus can get into our shop.

The president wanted to see some stats of browsing habits.... it grew from there.

We eat our own dog food, all my guys are behind the proxy as well as the president and other execs.

Was this something that management requested, or did you do it proactively? Are the employees aware of it? I know they don't have to be - we notify our employees that the computers are company property, no right to privacy, etc. - but I suspect if we were logging keystrokes, and they knew about it, we'd have some ticked off people.

Also, how does this tie into your corporate data retention policy WRT lawsuits?

 

[Y_lifter]

One good thing about EF mail is that our proxy has not blocked it..


YET

 

[strongsmartsexy]

I pushed to get a proxy, simply to block webmail. Because thats the only way a virus can get into our shop.

The president wanted to see some stats of browsing habits.... it grew from there.

We eat our own dog food, all my guys are behind the proxy as well as the president and other execs.

Yes, but the President and other execs are not getting monitored the way the other employees are.

 

[Code]

All the employees know that all the data coming into and out of their machines is logged. At first a lot of people bitched and complained and cried about it. But when they found out that Everyone is tracked, from the top down things settled down.

We use logs mostly to dispute unemployment claims. We don't block a lot of sites (webmail, hate sites and porn), we simply give people enough rope to hang themselves.

Most supervisors simply delete the e-mails that get sent to them. Every so often someone will come down and ask to see keystroke logs, but it's rare.

All employees sign an agreement that allows a LOT worse, for instance the legal docs they sign for our bonus program allows the company to access your bank account(s).

Also, how does this tie into your corporate data retention policy WRT lawsuits?

 

[strongsmartsexy]

Keystroke logs? Are you in the US?

 

[Code]

The presidents logs get sent to the owner.
The execs get sent to the president.

Yes, we're in the US. Yes it's legal to track keystrokes on work machines.

Yes, but the President and other execs are not getting monitored the way the other employees are.

 

[jerkbox]

why not just put cameras at their desks and in the hopper while you're at it...

 

[Code]

We have cameras at the entrances, that suffices.

why not just put cameras at their desks and in the hopper while you're at it...

 

[strongsmartsexy]

The presidents logs get sent to the owner.
The execs get sent to the president.

Yes, we're in the US. Yes it's legal to track keystrokes on work machines.

I recalled that there was some lawsuits about that at one point. It didn't look good for companies logging keystrokes at the time.

I used to get reports all the time at one company I worked for. Then I made them figure out the cost of doing that. It seemed that the cost benefit wasn't as great as they believed. It does, however, come in handy if you have someone working from the inside to screw up a business or take information as they're on their way out the door.

 

[Code]

Here's a copy of some keystroke logs.

I can't get the screen shots of the proxy to upload....

 

[jerkbox]

Here's a copy of some keystroke logs.

I can't get the screen shots of the proxy to upload....

meanwhile you're on elite all day....lmao

 

[Code]

Most courts side with businesses, what goes into and comes out of machines the company owns, is owned by the company.

All e-mail, documents worked on during work hours etc etc etc.

I recalled that there was some lawsuits about that at one point. It didn't look good for companies logging keystrokes at the time.

I used to get reports all the time at one company I worked for. Then I made them figure out the cost of doing that. It seemed that the cost benefit wasn't as great as they believed. It does, however, come in handy if you have someone working from the inside to screw up a business or take information as they're on their way out the door.

 

[Code]

Hahaha, like I said. We don't block tons of sites, we give people enough rope to hang themselves.

meanwhile you're on elite all day....lmao

 

[Razorguns]

omg. Can you imagine what you may find on keystroke logs from folks who use ims, personal emails, etc. Imagine what you could learn about your co-workers.

I love how people complain the the GOVERNMENT is so big-brother, and ruining civil liberties -- when it's your own EMPLOYER who does things 100x worse and you should be worrying about!!

The gov't doesn't even have 1% of the power over you during the day that your employer has.

 

[Code]

Yeah, but then the government doesn't own the PCs you use or pay the phone bills for you.

Most of us don't give a rat's-ass what people type. So we never look at them.
We just bear the burden of being perceived as the tyrants....

omg. Can you imagine what you may find on keystroke logs from folks who use ims, personal emails, etc. Imagine what you could learn about your co-workers.

I love how people complain the the GOVERNMENT is so big-brother, and ruining civil liberties -- when it's your own EMPLOYER who does things 100x worse and you should be worrying about!!

The gov't doesn't even have 1% of the power over you during the day that your employer has.

 

[TheProject]

All the employees know that all the data coming into and out of their machines is logged. At first a lot of people bitched and complained and cried about it. But when they found out that Everyone is tracked, from the top down things settled down.

We use logs mostly to dispute unemployment claims. We don't block a lot of sites (webmail, hate sites and porn), we simply give people enough rope to hang themselves.

Most supervisors simply delete the e-mails that get sent to them. Every so often someone will come down and ask to see keystroke logs, but it's rare.

All employees sign an agreement that allows a LOT worse, for instance the legal docs they sign for our bonus program allows the company to access your bank account(s).

Well, I'm thinking of it more in terms of the company protecting itself against lawsuits. For example, most companies have policies about not keeping e-mail more than 90 days, not retaining backups more than 30 days, etc, because that's all data that can be subpoenaed in the event of a lawsuit.

In a situation like this, you've got pretty much EVERYTHING logged...seems like that'd be a huge liability to the company in the event of a suit.

 

[Razorguns]

remember Arthur Anderson and Micrsoft being subpoened on their INTERNAL memos regarding various things?

it all came from BACKUPS.

If you're doing something that could get sued...DEFINATELY delete your backups, especially emails.

 

[jerkbox]

well anyway,

i guess i'm just gonna continue to surf elite at work....maybe not as much.

if i get told about it, well, I'll probably just be warned at first....and i'll just say they don't give me enough shit to work on....and i'm board....

wonder if i should stay away from the roid boards?

 

[Code]

We move our back-ups to our off-shore office after 120 days.

Well, I'm thinking of it more in terms of the company protecting itself against lawsuits. For example, most companies have policies about not keeping e-mail more than 90 days, not retaining backups more than 30 days, etc, because that's all data that can be subpoenaed in the event of a lawsuit.

In a situation like this, you've got pretty much EVERYTHING logged...seems like that'd be a huge liability to the company in the event of a suit.

 

[The_Ghost]

well anyway,

i guess i'm just gonna continue to surf elite at work....maybe not as much.

if i get told about it, well, I'll probably just be warned at first....and i'll just say they don't give me enough shit to work on....and i'm board....

wonder if i should stay away from the roid boards?

Just say no to drugs

 

[nsashbl01]

I run a few basic reports that usually finds the abusers. Top 10 sights, top 10 users by surftime. The top 10 sights points out the abusers if there is more than like 400 hits in a day. Depending on the tools they use, and the internet use policy, you may want to surp w/ caution.