Help finding UT player on LAN

Hi Gang.
I've been informed, by an outside source, that one of our employees is playing Unreal Tournament during work hours. This could be entirly possible because we have an evening shift, and there are no (good) supervisors at that time of day.

Is there a file, that I could quickly find by searching our user's workstations. Or, is there a program that needs to be installed, something I can find through SMS?

I'm going to search the UT website for information, but thought someone here could have the answer at hand.

Thanks for any replies!!

Depending upon the equipment you have you could - run a sniffer to see where traffic is coming and going (ie - if you have a hub or switches you can set up monitoring ports on). Someone here recently recomended ethereal.com and their free sniffer works quite well.

You could use SMS to look for the .exe files on the PC's and look for the exe that UR uses to launch applications. If you have only a few PC's you could just go looking for the proggie by going to the admin$ or the C$ share and looking through the "Program Files" folder for the proggie.

Thank you much for your reply. I'm going through SMS right now, to see if I can find the PC with the UT executable on it. With any "luck" it'll be on one of the PCs with SMS, and not one on one of our production networks, without SMS installations (there are two to search through).

I'm waiting on more information from the "outside source", as to when this user is supposidly playing online. This way, I'll have an idea when to watch the network.

We have a wide mixture of PCs, running various OS's, some of them MACs, so I'm not even sure where to start looking.

I'm going to try the software you mentioned, and see if that helps. If you think of anything else, I'm all ears!!!

Thanks again! The help is very much appreciated.

Some files extensions to look for which are used by Unreal Tournament: *.utx, *.int, *.u, *.unr, *.uax, *.umx and *.umod.

The executable is "UnrealTournament.exe", simply enough.

If this guy's smart though, he may be running it under a Linux partition, like I've seen a user do in the past...

Good hunting. ;)

so what will happen to the punk running U.T. ? :)

Quote:

---

Originally posted by PeLiGrOsO
so what will happen to the punk running U.T. ? :)

---

(Sorry I didn't reply earlier)

I wish I knew what would happen, exactly. More than likely, get some walking papers. But, all this will be totally up to their supervisor. Somehow, though, I don't think they'd be allowed to stick around for very long.

Thanks for all the replies. Now, to do some investigative work!