How can I view what was searched on my network

Internet access discussion, including Fusion, IP Broadband, and Gigabit Fiber!
6 posts Page 1 of 1
by drake1000 » Tue Oct 18, 2022 7:38 pm
I was wondering whether i could see the search history on the network or packets
by igorru » Tue Oct 18, 2022 11:54 pm
I'm not sure I understand what you mean by that. Are you looking for something like the browser search history from different devices on your LAN?
by ngufra » Wed Oct 19, 2022 4:49 pm
Mot traffic is encrypted these days.
You could record the packets but you would need the decryption keys

You can use tools like wireshark to record the packets.
See https://wiki.wireshark.org/TLS for how to set chrome to store they keys used and have wireshark use them to decrypt stored traffic.
by drake1000 » Wed Oct 19, 2022 5:17 pm
Browser history.
by ngufra » Wed Oct 19, 2022 5:25 pm
Depends on the browser, usually yes.
in Chrome, Ctrl H brings the history, a list of web pages by time stamps.
by igorru » Wed Oct 19, 2022 8:19 pm
As ngufra said, you can use Ctrl H on most (all?) browsers to look at the browsing history, if you have access to that computer. You can also disable the 'clear history and 'incognito' options in most browsers if you have admin access.

If you do not have access, packet sniffing is the only way to directly examine traffic and most of the time it's going to be encrypted.

There are ways to look at which domains are being visited from your network - not search queries, but at least an idea of sites being visited. For example, one could set up a router that runs a DNS resolver and re-routes all DNS queries to itself. If you block all encrypted queries and allow only clear text ones you would have a record of all DNS queries performed. pfSense is an example of a router that this can be done with.

Is there a particular reason you want to do this? We may be able to give you more specific advice if there is more information.
6 posts Page 1 of 1