The difference between network monitoring, network monitoring principles, network monitoring and other monitoring
What is a network monitor?
In fact, monitoring network, network behavior (such as email, chat, web, file transfer), etc. whenever and internet content related behaviors do records and online behavior control.
The principle of network monitoring
network monitoring through the acquisition of data packet transmission network above, to analyze the data packets to restore order to get Internet content.
Network monitoring needs the support of the switch, the switch only with "Port Mirroring" function can be achieved only monitoring functions. Of course, the monitoring software installed can also be implemented to monitor the Internet proxy server or gateway server above.
Protocol analysis is the most important part of network monitoring technology. Various means of communication (such as email, chat, file transfer, web pages) have taken different transport protocols. Instant messaging inside QQ, MSN, YAHOO, etc. are also different chat protocols. So the more support the agreement, the better the support, so that online behavior can be accurately managed.
The advantages of network monitoring is that:
- Ease of deployment. Just install on one computer can monitor the entire network.
- Internet management more powerful. Can manage a variety of network behavior pages, chat, file transfer, mail and so on.
Network Monitoring disadvantage is that:
1) or the need to switch the proxy server support.
2) You can not monitor the behavior without network activity. For example, the screen can not be intercepted, you can not monitor the stand-alone games.
Network monitoring mode and differential mode other monitoring
network monitoring software that is installed on the LAN as long as a computer can, all the data and behavior are achieved from the network, so long as the computer through the LAN access, then it must be monitored and management and only do management and internet-related behavior.
Other monitor mode: The main client monitor mode, that is, you need to install the program on the monitored computer, so not only can monitor network behavior, you can cut the screen, USB, or even a hardware asset management. But this will need to install a client monitor mode, monitor the machine once installed a firewall or anti-virus software or reinstall the computer, it will lead to failure monitoring.
The advantages of client monitoring are:
- Can monitor the screen and stand-alone game, you can monitor file copies of such acts.
- No hardware support, as long as the client is installed on each computer can monitor above.
Client Monitoring disadvantage is that: - Need to install on top of each computer, the number of machines at station number of cases is too much trouble, and once the computer to reinstall all need to reinstall the client.
- Since the client the general principles of Trojans, all easily be blocked off anti-virus software or firewall.