Newbie: I need to monitor traffic off a server.
Hi
I have a requirement to monitor files that are being transferred from a server (Ubuntu 18.04). Don't care if it is moved within the server or if things are transferred to the server, but if something is transferred off the server, then alerts need to be given allowing possible investigation.
I would need to capture the following information
Name of file Path of file System being transferred to (.e.g IP address and where it is) User initiating the transfer
And have that information available for at least a couple of years.
It would be useful to be able to automatically create alerts depending on
Name of file Path of File Size of file File rates of transfer
I have been trying to find an answer for a long time and seem to go around in circles. Do not mind a commercial product, but free is preferrable!
Most things seem to be trying to solve everything in relation to networks, but as you can see, it is a pretty narrow solution I am looking for.
Is this something WireShark can manage? Any help gratefully received.
Apologies, not a DevOps or networking expert, just something the 'boss' has asked be to look into
N
Comments