|
In this topic: |
Spector CNE
Administrator's Guide
|
Configure Computers
By default, the Client captures all network activity occurring at a computer. Because the amount of network activity captured on a busy network can be overwhelming, you can configure the Client to record fewer connections from the Network Activity panel of the Deployment Utility wizard or Client Settings.
Capture Network Activity
- Check the first option to enable Network Activity recording.
Clear the check box to disable recording of Network connection events.
Turning
off Network Activity recording has no effect on the recording of Files
Transferred, Document Tracking, Web Sites visited, or other types of recording.
By default, an Internet connection made by ANY program is recorded. An Adobe download, for example, or Internet Explorer web surfing activity would cause network events. However, when Internet Explorer is used to access local area network resources, the event is not recorded. You can specify programs to limit what is recorded as Network Activity.
Include - Check this option to record connections made ONLY by the programs listed in the following box. For example, you might want to include MusicMatch Jukebox (Mmjb.exe) to focus on how many connections are made for online music.
Exclude - Check to ignore network connection activity by specific programs. For example, you may decide that Web Sites Visited recording makes it unnecessary to also record Internet Explorer connections made here. You can exclude Internet Explorer (Iexplore.exe) to greatly reduce the recorded Network Activity events.
Add - Click the Add button to open a window where you can Browse to and select the program executable file to include or exclude. See Including/Excluding Programs
Delete - Select a program in the include/exclude list and click the Delete button to remove the program from the list.
By default the Client captures network activity at all ports except ports at the following IP addresses. These are standard private IP address ranges that could be used on a local network and are excluded to omit capturing a large number of normal local transactions.
10.*.*.*:* - Connections made at the local computer to itself
169.254.*.*:* - Local area network ranges commonly used by DHCP
192.168.*.*:* - Local area network ranges commonly used within a network
You can change the way the Client monitors network connections to focus in on problems that happen on your particular network or to reduce the data captured.
|
|
All network connections have IP:Port information. The IP is the address of the computer where the network connection was established. The port distinguishes the connection at a particular remote computer. Ports are like phone extensions to a single phone number. Some port numbers are well known, standard Internet connections. For example, port 25 is almost always used for SMTP email, and Port 80 is almost always used for web page connections. |
Include - Select to capture Network connections made only at certain IP ports. Connections at other ports will NOT be recorded. Be sure to delete the default ports and click Add to specify which ports to include, otherwise only the default connections will be monitored. For example, if you only wanted to capture web traffic, clear the existing IP ports and include any IP address and port 80 (*.*.*.*:80). See Including/Excluding Ports.
Exclude - Select to ignore Network activity at specific ports. All other activity will be recorded. Click Add and select ports to exclude in addition to the default, or change the default ports. For example, port 25 is almost always used for SMTP email. You may want to add exclusion of this kind of email activity if you get enough data from Client Email Recording (*.*.*.*:25). See Including/Excluding Ports.
Add - Click this button to open a box where you add an IP port to capture or exclude. See Including/Excluding Ports.
Delete - Select a port and click the Delete button to remove the port from the Include or Exclude list.
Do not change the advanced settings unless you have discovered a problem. Click the Advanced button, then confirm that you want to make changes. See Advanced Network Activity Settings.
