Re: Capturing instant messages

2006-07-19 Thread Ed Leafe
On Jul 18, 2006, at 3:17 PM, Yu-Xi Lim wrote: > This is going to be quite off-topic. But helpful nonetheless. > I'm not entirely familiar with SOX regulations. Is it necessary to > capture it at the gateway? I'm no lawyer either, so I probably know as much about this as you do

Re: Capturing instant messages

2006-07-18 Thread Yu-Xi Lim
Nick Vatamaniuc wrote: > Assuming a one person per one machine per one chat protocol it might be > possible to recreate the tcp streams (a lot of packet capturing devices > already do that). So the gateway would have to have some kind of a > dispatch that would recognize the initialization of a cha

Re: Capturing instant messages

2006-07-18 Thread Nick Vatamaniuc
Assuming a one person per one machine per one chat protocol it might be possible to recreate the tcp streams (a lot of packet capturing devices already do that). So the gateway would have to have some kind of a dispatch that would recognize the initialization of a chat loggon and start a capture pr

Re: Capturing instant messages

2006-07-18 Thread Ed Leafe
On Jul 18, 2006, at 7:36 AM, Nick Vatamaniuc wrote: > It depends on what IM protocol the company is using. If there is more > than one, your job might end up being quite complicated. You indicated > port 5190 in your post, does it mean that the company is using only > AOL > IM? Yes, the

Re: Capturing instant messages

2006-07-18 Thread Nick Vatamaniuc
Ed, It depends on what IM protocol the company is using. If there is more than one, your job might end up being quite complicated. You indicated port 5190 in your post, does it mean that the company is using only AOL IM? In general it seems like you would have to: 1) Capture the traffic 2) Decode

Re: Capturing instant messages

2006-07-17 Thread Paul Rubin
Ed Leafe <[EMAIL PROTECTED]> writes: > But assuming that there is no such product, would it be > possible to create something in Python, using the socket or a similar > module? They have a number of servers that provide NAT for each group > of machines; I was thinking that something on tho

Capturing instant messages

2006-07-17 Thread Ed Leafe
I've been approached by a local business that has been advised that they need to start capturing and archiving their instant messaging in order to comply with Sarbanes-Oxley. The company is largely PC, but has a significant number of Macs running OS X, too. Googling around qu