File Activity Monitoring - See Usernames and Actions






It monitors and records every access to file shares, recording details of user name, client IP address, server name, event type, file name, and data volume. Just setup a SPAN or mirror port to sniff the traffic. No agents or client software required and no need to enable auditing on your file servers.

With LANGuardian File Activity Monitoring software you can tell exactly what is happening on your Windows file shares.

 NetFort LANguardian -  File Activity Monitoring

LANGuardian stores this information in its database, and uses it as the basis for a wide range of reports that you can access via the browser-based user interface. It is the only file activity monitoring solution that you will need.

“Our files are precious.” – NetFort customer, US Defense contractor.

With the unique level of insight it offers into activity on a Windows network, LANGuardian will quickly become an indispensable part of your network management and system administration toolkit. You can apply it to a wide range of troubleshooting and monitoring tasks, for example:

  • Finding out what files or folders have been deleted from a file share and who deleted them.
  • Locate the source of Ransomware on your network.
  • Identifying the users who have accessed a specific file or file share over a specific time period.
  • Counting how many files of a given type are shared on the network.

The file activity monitoring feature in LANGuardian is powerful and easy to use. You simply enter an IP address (subnets are also supported), a username, or a filename, then click Go. LANGuardian returns a report showing a summary of all information matching the IP address, user, or file you specified. You can then drill down into the details of a specific file or folder, to see details of each action (open, close, read, write, create, and so on) and the time it was performed.

NetFort LANguardian - File Monitoring
NetFort LANguardian - File Monitoring

How it Works

 At a technical level, LANGuardian file activity monitoring works by analyzing network traffic that uses the Microsoft Server Message Block (SMB), a network file-sharing protocol that facilitates sharing of data between clients and servers. SMB is primarily a Windows-based protocol, but a number of third-party products exist to make it available on other platforms including OpenVMS, HP-UX, Solaris, Novell Netware and Linux. The open-source implementation, Samba, is the most widely used. LANGuardian can monitor file share activity on any platform that implements the SMB protocol.

File Activity Monitoring – Your Next Steps:

If you have any questions about LANGuardian file activity monitoring, please contact us. If you would like to see LANGuardian in action, please try our online demo system or download a free 30-day trial to try it on your own network with your own data.


Contact Us


Telnet Networks Inc.
100 Strowger Blvd, Suite 118, Brockville, ON, K6V 5J9, Canada


(800) 561-4019



For More Information about Telnet Networks, our products, or our services, or to request a quote please feel free to contact us directly.