How to detect remote login attempts

How To Detect Remote Login Attempts

Note that you need to have your Netmon device sniffing traffic from your switch for this to work. Netmon needs visibility on your network traffic to complete this HOWTO. For instructions on setting up traffic sniffing, see http://wiki.netmon.ca/index.php/User_Guide:Monitoring_Network_Activity#How_Netmon_Monitors_Network_Traffic

Detecting remote logins is simple in Netmon. Run a Bandwidth Consumption Report with the following criteria: