My task is to basically monitor HTTP traffic generated by our workstations to be able to track time that is spent being unproductive on websites instead of time spent working.
I can track port 80 traffic when Wireshark is running on the workstation. However, is there a way to sniff packets coming in and out of the router itself?
The problem is that the internet traffic doesn't go through our server, therefore when i capture packets on the server, it captures all network traffic generated by our applications, but no HTTP traffic generated by the workstations. Is there a better way or a more centralized way to capture these packets from the workstations, where i can then filter them by IP address and analyze packets by workstation?