How to find intruders

Hi,

As the admin, I need to find and detect intruders in my segment. I
need a tool that will just log the activity tries of the intruders
together with their IP and MAC addresses.

There are users trying to send trojans and viruses, and even managing
to get the control of other users PC's.

Any tool/method you can advise

Sanal Kisi wrote:
As the admin, I need to find and detect intruders in my segment. I
need a tool that will just log the activity tries of the intruders
together with their IP and MAC addresses.

There are users trying to send trojans and viruses, and even managing
to get the control of other users PC's.

Any tool/method you can advise

Ouch.
Double posting your question 1.5 hours apart in the same newsgroup with a
different subject line?

Patience.. As and admin, you may want a little of that as well. *grin*

I'll answer again:

Look into setting up a "HoneyPot".

http://www.sans.org/resources/idfaq/honeypot3.php
http://secinf.net/info/ids/IDFAQ/honeypot.htm
http://www.itsolvers4u.com/security/.../honeypot2.htm

--
- Shenan -
--