Monitoring VNC traffic

[sweeneycj]

Anyone know of an area where information on monitoring VNC traffic would be?

I have been asked to monitor VNC traffic and the baseline signature I have loaded

on devices seems a little lacking in scope....

Anyone else looking at this traffic on their network and can give some insight?

I didn't get alot of hits in the knowledge base when looking for VNC traffic so any

inforation can help.

Thanks...

[Maykol Rojas]

Hello,

What exactly would you like to see? You know that signatures are based on behavior, you would like to know how many times during the day VNC has beeing used? Traffic inside VNC?

Mike

[sweeneycj]

I think mainly to see who is actually using or attempting to use VNC products...

Might be as simple as monitoring a port; this will help us track down any unauthorized

attempts at using VNC products...I just want to see what options I have.