The boss wants me to see if I can get a list of all IPs visited by our network off our router. He hit me up with this as I was leaving, not even sure what brand of router we have (and I know damn little about routers). We got a big spike of adult spam and he’s convinced somebody is surfing pron off the UPS computer or something.
So can this be done, or do we need a logging program on the server or something?
Impossible to say without knowing what kind of router you have. At a minimum you need to know the model of your router, the IP address, the administrator username and password, and the access method (shell or web).
Low-end routers usually don’t log. High-end routers give you the option of logging or not logging. If you want logging and traffic analysis, this is really what firewalls/proxy servers are for. What you need is to contact someone with a clue and give them a lot of money to secure your network.
Yeah, logging of DHCP requests is about all any of my small collection of hardware routers will do. What is your ‘server’, and what functions does it fulfill? My Linux box here at home handles my routing, meaning it’s a bottle-neck for network traffic, and could easily log all http requests if configured to do so. (I used to use ntop before my last server upgrade. Here is a (fairly comprehensive) list of network monitoring software available to Linux users).
Barring all that, if you have a small network and control all the PCs on it, I imagine it might be easier to install logging software on all the PCs individually. I’ve never done something like that, but I’m sure it wouldn’t be hard to find some software to do it.