NetFort Advertising

File Activity Monitoring Software

See exactly what is happening on your network file shares with LANGuardian.

It monitors and records every access to file shares, recording details of user name, client IP address, server name, event type, file name, and data volume. Just setup a SPAN or mirror port to sniff the traffic. No agents or client software required and no need to enable auditing on your file servers.

SMB Traffic Drilldown

LANGuardian stores this information in its database, and uses it as the basis for a wide range of reports that you can access via the browser-based user interface. It is the only file activity monitoring solution that you will need.

“Our files are precious.” – NetFort customer, US Defense contractor.

With the unique level of insight it offers into activity on Windows file shares on your network, LANGuardian will quickly become an indispensable part of your network management and system administration toolkit. You can apply it to a wide range of troubleshooting and monitoring tasks, for example:

  • Finding out what files or folders have been deleted from a file share and who deleted them.
  • Locate the source of Ransomware on your network.
  • Identifying the users who have accessed a specific file or file share over a specific time period.
  • Counting how many files of a given type are shared on the network.

The file activity monitoring feature in LANGuardian is powerful and easy to use. You simply enter an IP address (subnets are also supported), a username, or a filename, then click Go. LANGuardian returns a report showing a summary of all information matching the IP address, user, or file you specified. You can then drill down into the details of a specific file or folder, to see details of each action (open, close, read, write, create, and so on) and the time it was performed.

How it works

At a technical level, LANGuardian file activity monitoring works by analyzing network traffic that uses the Microsoft Server Message Block (SMB) or Network File System (NFS). SMB is primarily a Windows-based protocol, but a number of third-party products exist to make it available on other platforms including OpenVMS, HP-UX, Solaris, Novell Netware and Linux. The open-source implementation, Samba, is the most widely used. NFS is primarily used with Unix operating systems such as Linux. LANGuardian can monitor file share activity on any platform that implements the SMB or NFS protocol.

File Activity Monitoring – Your Next Steps:

If you have any questions about LANGuardian file activity monitoring, please contact us. If you would like to see LANGuardian in action, please try our online demo system or download a free 30-day trial to try it on your own network with your own data.

Talk to us now

Talk to NetFort today. Contact us at or call us at +1 (646) 452 9485 or +353 (91) 520 501 in EMEA.

How to buy

We offer perpetual and subscription LANGuardian licenses based on the number of users on your network and the number of sensors you want to deploy. Specialized features are provided as optional modules, so you do not pay for them if you do not need them.

Learn more