I work in the security assessment field and currently utilize Websense for content monitoring. My
license for websense will be up in a month and would like to replace it with an open source solution.
Are there any open source solutions that will allow me to use a spanned (mirrored) port on a switch
to monitor traffic, specifically web traffic and match that traffic against a blacklist, such as
urlblacklist.com's list. I just want to monitor the traffic and be able to provide a report based on
what users within an organization are looking at by passively sniffic the traffic on the spanned port.
I know this isn't directly related to squid, but I would like to then recommend squid/dansguardian
to be used for content filtering in some cases.
Any ideas?
