Contents

What's New?

What is LittleBrother?

What is included in LittleBrother?

System Requirements

Installation

Uninstallation

Contact Kansmen Corporation

Main Screen

Toolbar

Quick Access Via Mouse Clicks

Export Data

Network Application Monitor

Network Bandwidth Analysis

Reporting System

Configuration & Dialog Boxes

How To

Troubleshooting

Frequently Asked Questions - FAQ


What's New?
What's New in LittleBrother 3.0?

Web Interface

This is for managers who wish to view reports remotely, without having to install the LittleBrother client.  Most of the reports that can be created in LittleBrother are just as easily created using the web interface.  By simply typing in the IP address of the machine LittleBrother is running on, the user can have instant access to LB information.

Access Database

LittleBrother now saves its data using an Access compatible database format.  By simply opening the klbdbase.mdb file using Access, custom reports can be generated.

Automatic Ratings Database Updates

This will allow you to get the latest ratings database from us, automatically.  By enabling this, LittleBrother will connect to our server, and download the latest ratings database.  By using this option, the latest sites will be in your database nearly immediately.

New Reports

Traffic Types Report – This breaks down several different kinds of traffic on your network into percentages.  It will show you what kind of traffic takes up the most bandwidth, for instance.

Blocked Users and Blocked Sites – These show you who tried to access sites that were blocked by LittleBrother.

Access Logs – Now available in a summary or detail format, with more specific references to KB downloaded and category of the site (Windows98 and NT 4.0 only).

Improved Printing Capabilities

Report printing has been expanded with version 3.0.  Different formats can be created, so that the reports look just as good on paper as they do on the screen.

Import Groups

Using a CSV (Comma Separated Value) file, LittleBrother users can import previously formatted groups into LittleBrother.  This saves administrators time when it comes to group creation.

Expanded Group Options

Groups can now be assigned passwords, so managers can see their groups’ information only.


What is LittleBrother?

Monitor Internet/Network Traffic

Kansmen’s LittleBrother monitors Internet usage on LAN, blocks sites and summarizes the usage in various reports. It runs under Windows 95 or above and NT 3.51 or above.

LittleBrother keeps track of www, FTP, and newsgroup traffic by user, site, protocol, bytes transferred, and capacity utilized.

Bandwidth Utilization

With LittleBrother, a network manager can know how much bandwidth is used for each application (Web, FTP, Telnet, Mail, News, etc.), who uses the most resources, and which sites are visited the most. This gives managers a better idea of their WAN usage and user’s activity. With the reports on hand, important decisions can be easily made based on whether to increase WAN bandwidth or direct some users to other WAN link, for Internet access.

Block Unproductive Site

Managers can specify rules to block certain unproductive sites during working hours on a group of users. Based on various Internet traffic reports, managers can further limit particular Internet traffic on the network so that business traffic is not affected. LittleBrother automatically sends an alert message to the user who violates company Internet access policies and logs that violation. LittleBrother categorizes all Internet sites in about 50 groups ranging from business, sports, to on-line shopping. They are ranked as productive, un-productive, and neutral so that managers can control which sites can be visited during business hours and which sites are of interest to the company.

Reports

LittleBrother provides a report wizard to assist you in generating various reports based on Internet application protocols, users, and sites. A query tool is also available to generate custom usage reports.

See also

What's New?

What is included in LittleBrother?

Main Screen

Toolbar

Quick Access Via Mouse Clicks


What is included in LittleBrother?

This version of LittleBrother includes the following:

•	LittleBrother program

•	Quick reference

•	Sample Internet policy

•	Database backup utility

•	Readme file

•	Troubleshooting file

•	Slide presentation

Quick Reference

This document presents a simplified documentation of LittleBrother.  It describes briefly the features and operations of LittleBrother.

Sample Internet Policy

This is a sample document that you can use as a starting point to implement your company-wide Internet policy.

Database Backup Utility

This utility allows you to backup and restore the LittleBrother database.

Readme File

This file contains the latest information of the software.

Troubleshooting File

This file contains the most recent information on troubleshooting.

Slide Presentation

This is a program that will present animated slides to explain the software.


System Requirements

To run LittleBrother, you need:

•	Minimum Pentium 133 with 32M RAM

•	Recommended Pentium 200 with 64M RAM or more

•	Microsoft Windows 95 or above, NT 3.51 or above

•	Network interface card with TCP/IP connection

•	Workstation must be directly connected to the LAN being monitored

•	30MB of available hard disk space


Installation

1.	Insert the LittleBrother diskette or CD-ROM into the appropriate drive.

2.	Run setup.exe from the diskette or ginstall.exe from the CD-ROM.

3.	Press the LittleBrother button to start installation (CD-ROM only).

4.	Follow the instructions on the screen to complete the installation.

5.	Installation will copy all the files to the selected destination.

6.	Restart your computer.

7.	Launch LittleBrother (only if LittleBrother does not start up automatically).

There are two ways to install LittleBrother; Standalone and Client/Server installation.  The Standalone version is intended to be run in a single PC, for Windows95.

For Client/Server installations, there is a data collection module that is installed on the server and user interfaces that are installed on the client.  If this option is chosen, the server module must be installed on a Windows NT system.  The client and server modules can be installed in different PCs, for remote access.

Remote Access

By using a Client/Server installation, the network administrator can access the server from a remote location.  Reports can also be viewed using the Web Interface.


Uninstallation

Double-click the Uninstall icon in the LittleBrother program group if you wish to uninstall LittleBrother.  Windows 95 or NT 4.0 users, run Add/Remove Programs from the Control Panel and select LittleBrother.

All files and directories will be removed.  Registry entries made by LittleBrother will also be deleted.


Contact Kansmen Corporation

For technical support about LittleBrother, please refer to the troubleshooting section of this help or the on-line help or your reseller.

For questions or suggestions, please write to us at:

         Kansmen Corporation

         Attn.:   LittleBrother

         P.O. Box 360070

         Milpitas, CA 95036-0070, USA

         Email: 	support@kansmen.com

         Web:	www.kansmen.com

         Tel: 	408-263-9881

         Fax: 	408-263-9883


Main Screen

Upon successful configuration, LittleBrother opens an application space that shows the Internet or network traffic in your organization.

Note that it may take several minutes or more for the Internet traffic to show up.  This really depends on whether or not you have Internet traffic in your LAN at that time.

Main view

It is on the left-hand side of the application, and it is composed of three dialog tabs: Users, Sites, and Overview.

The right-hand side is an example of the new timeline report.  It shows the time spent by each user on the Internet compared with the total Internet bandwidth utilization.

Refresh

Press this button to refresh the screen on the main view.

Configure

Press this button to bring up the Report Dialog to configure the main view.

Users Tab

It shows the Internet traffic of each user in your Internet/network and is sorted by the amount of traffic each user generates.

Sites Tab

It shows the Internet traffic of each site connected by your users in your LAN and is sorted by the amount of the traffic on each site.

Overview Tab

It shows the overall Internet traffic pattern of your LAN.  It contains two sections.  The first section divides all Internet traffic into four different ratings: Productive, Unproductive, Neutral, and Not Rated.  The second section divides all Internet traffic into different categories such as: Business, Computing, Hobbies, etc.

See also

What's New?

What is included in LittleBrother?

Toolbar

Quick Access Via Mouse Clicks

How to resize the main view?

Export Data


Toolbar

The toolbar allows you to access some of the most frequently used functions quickly.  Here is the list of the toolbar buttons.

Print Button

Press this button to print the current selected view or report.

Time Button

Press this button to show the main view traffic measured by time.

Volume Button

Press this button to show the main view traffic measured by volume in kilobytes (KB).

Productive Rating Button

Press this button to show and color the main view traffic according to the productive rating (Productive, Unproductive, Neutral, Not Rated).

Network Application Button

Press this button to show and color the main view traffic according to different network applications (Web, FTP, Usenet, Telnet, E-Mail, NetWare File Copy, Oracle, Sybase, etc.).

Incoming/Outgoing Button

Press this button to show and color the main view traffic according to incoming and outgoing traffic.

Blocking Button

Press this button to show the Blocking Dialog .

Report Wizard Button

Press this button to show a report wizard.

Sites Timeline Button

Press this button to show a Sites Timeline Report.

Users Timeline Button

Press this button to show a Users Timeline Report.

Top Talker Button

Press this button to show a Top Talker Report.

Top Sites Button

Press this button to show a Top Site Report.

IP Table Button

Press this button to show an IP Table Report.

About Box Button

Press this button to show the About Dialog Box.

See also

Quick Access Via Mouse Clicks


Quick Access Via Mouse Clicks

There are many context sensitive quick accesses available for different mouse clicks.  In general, there are two different ways to invoke such context sensitive quick accesses:

•	Left mouse double-click to activate the default action

•	Right mouse single-click to bring up a context-sensitive popup menu

There are several targets that you can mouse click to invoke the context sensitive quick access.  It includes:

•	Site Name

•	Site Usage Bar

•	User/Computer Name

•	User/Computer Usage Bar

Note that these apply only to the chart-based report such as User Tab and Site Tab in the main view and any other report generated in bar chart format.

When you move your mouse over one of those supported targets, you will see the mouse cursor changes to reflect the availability of the quick access.

Site Name

Right mouse single-click

It will bring up the following popup menu.

Timeline	Bring up a Sites Timeline Report

Site Detail 	Bring up a Site Detail Report

Go to	Bring up a popup menu and go to the specified site via Web, FTP, or News accesses

Properties	Bring up the Site Properties Dialog

Left mouse double-click

It will bring up Site Properties Dialog .

Site Usage Bar

Right mouse single-click

It will bring up the following popup menu:

Timeline	Bring up a Sites Timeline Report

Site Detail 	Bring up a Site Detail Report

Set Default Report	Bring up the Set Default Report Dialog to select a default report

Left mouse double-click

It will bring up the default report selected in the Set Default Report Dialog or Preferences Dialog. .

User/Computer Name

Right mouse single-click

It will bring up the following popup menu:

Timeline	Bring up a Users Timeline Report

User Detail 	Bring up a User Detail Report

Properties	Bring up the User Properties Dialog

Left mouse double-click

It will bring up the User Properties Dialog.

User/Computer Usage Bar

Right mouse single-click

It will bring up the following popup menu:

Timeline	Bring up a Users Timeline Report

Detail 	Bring up a User Detail Report

Set Default Report	Bring up the Set Default Report Dialog to select a default report

Left mouse double-click

It will bring up the default report selected in the Set Default Report Dialog or Preferences Dialog. .

See also

Preferences Dialog

What's New?


Set Default Report Dialog

This dialog box allows you to set the default report that will be activated via left mouse double-click.

See also

Quick Access Via Mouse Clicks


Export Data

Select “Save As” from the menu “File” to go to the submenu and choose one of the following:

•	HTML

•	Text (CSV)

Once you choose the file format, a dialog box will ask you for the file name.

This will allow you to export data from a table report so that you can share with or import into another software.

Note that only a table report can export data.


Network Application Monitor

LittleBrother, by default, already has the ability to monitor network applications.  It can monitor both Internet and Intranet (LAN) network applications.

Generally, you can generate a report to determine the workload, bandwidth impact, and some other effects of the different network applications.

You can see the network application monitor by generating a top talker or top site report.  Make sure to select “Application” in the “Color by” option in the report dialogs.

Monitor LAN Applications

However, on the LittleBrother installation, the local traffic monitor by default is off.  Therefore, you need to turn on that option in the custom setting during the installation process if you want to perform Intranet/LAN application monitoring.

You need to make sure the following are on:

•	Monitor Local Traffic

•	Include NetWare Traffic (IPX/SPX)

Quick steps to see network application monitor in the main view:

1.	Select User Tab in the main view

2.	Press the Network Application Monitor (RATINGS) button

Quick steps to see network application monitor in top talker/top site report:

1. Press either one of these buttons to show

Top Talker Report

or

 	Top Site Report.

2. Select “Application” on the “Color By” option

3. Select “Exclude Intranet” if you want to see only Internet application

4. Press the OK button

This sample top site report shows two different types of network application traffic: WWW and Usenet.

This sample top talker report shows several different types of network application traffic such as: NetWare and Windows.

See also

Network Bandwidth Analysis

Top Talker Report

Top Site Report

Report Dialog

How To

How to monitor network application?


Network Bandwidth Analysis

LittleBrother, by default, already has the ability to perform bandwidth analysis on the network.  It can handle both Internet and Intranet (LAN) bandwidth analysis.

Generally, you can generate a report to determine the bandwidth impact from different angles such as users, Internet sites, time of day, and network applications.

Here are some examples of reports that they can do for bandwidth analysis:

•	Users Timeline Report can do bandwith analysis on how users access different Internet sites that will impact the overall Internet bandwith usage at any point during the day.

•	Sites Timeline Report can do bandwith analysis on how each Internet site accessed will impact the overall Internet bandwith usage at any point during the day.

•	Summary By Day can give you a general view of daily bandwith utilization.

•	Summary By Hour can give you a general view of hourly bandwith utilization.

See also

Network Application Monitor

Reporting System


Reporting System

LittleBrother allows you to create different kinds of reports in an organized, easy to read form such as:

•	Most active users/sites

•	Most productive/unproductive users/sites

•	Timeline of when and how users access Internet sites

•	Detailed access log

•	The busiest hours

•	Traffic usage distribution

•	Bandwidth utilization/analysis

•	Network application usage/distribution

•	Access restricted/blocked Internet sites

•	Who is exceeding the usage limit

You can generate different reports via the “Reports” menu and have different report parameters such as:

•	The output format of the report – (Bar Chart, Table)

•	The measurement of the report – (Time, Volume)

•	The time range of the report – ( Last hour/day/week/month)

•	The types of traffic to be included – (All, Productive, Unproductive, Not rated, Specific Category)

•	Whether to show only Internet traffic

•	Whether to show the top user for the particular site or top site for the particular user

•	Which kinds of logical interpretation – (Incoming/Outgoing, Application, Rating)

You can include these options in most of the reports:

•	Cost Analysis option to estimate the cost of lost productivity

•	Baseline Comparison option to compare current vs. historical usage

•	Show Traffic by Groups option to show traffic according to groups or users.

•	Scheduling of Reports to generate reports periodically such as on a daily, weekly, and monthly basis.

See Report Dialog for detail information of different report parameters.

See Report Wizard to generate reports in both easy and well-explained steps.

Timeline Reports

These reports show the timeline of the user activities in the Internet.  They show the time a user spent accessing specific Internet sites.

These reports show you who and what uses your Internet bandwidth, and at what time your bandwidth is being used.

Users Timeline Report

Sites Timeline Report

User Based Reports

These reports show the user activities on both Internet and/or network.  These reports show information based on users.

Top Talker Report

User Detail Report

Productive User

Unproductive User

Site Based Reports

These reports show the user activities on both Internet and/or network.  These reports show information based on users.

Top Site Report

Site Detail Report

Productive Site

Unproductive Site

Overview and Summary Reports

These reports show a general snapshot of the Internet/Interanet traffic in the organization.

Daily Overview

Hourly Overview

Overview Report

User Overview Report

Category Overview Report

Summary By Hour

Summary By Day

Other Reports

IP Table Report

Access Log Reports (Users & Sites)

Blocked Users/Blocked Sites

Report Wizard

Report Wizard

See also

Network Application Monitor

Network Bandwidth Analysis

Quick Access Via Mouse Clicks

Export Data

What's New?

Report Dialog


Baseline Comparison

Many reports allows you to do a comparison of the data.   You can compare a month to month traffic pattern.  This can help you spot any abnormal traffic patterns.

Report Dialog

Below is the Report Dialog that allows you to select different options in the reports.

Include Baseline	Include baseline comparison on your report.
Choose Baseline	Select the baseline via the Choose Baseline Dialog.
Choose Baseline Dialog

This dialog box allows you to choose the baseline from:

Previous Day	Compare data at the same time over the previous day
Previous Week	Compare data at the same time over the previous week
Previous Month	Compare data at the same time over the previous month
Specify Date	Compare data at the same time over the specified date

This is a Top Talker Report with the baseline option selected.  The column Previous Day displays the time spent by each user at the same time on the previous day.


Cost Analysis

Cost Analysis allows you to attach a cost factor to the Internet traffic.  This allows you to get a fair estimate of how much each user Internet access costs.

Report Dialog

Below is the Report Dialog that allows you to select different options in the reports.

Include Cost Analysis	Include cost analysis on your report.
Set Cost Per Hour	Set the actual cost per hour via the Set Cost Dialog.

Set Cost Dialog

Cost	Specify the actual Cost/Hour for the report.

This is a Most Unproductive Users Report with the Cost Analysis option selected.  The column Cost displays the cost of lost productivity of each user in one day.    The total unproductive cost is listed at the bottom.


Show Traffic by Groups

You can generate reports on groups and users.  By showing traffic by groups, you can easily show how each department uses the Internet.

See Chapter 4, Group Configuration Dialog for detailed information to define groups.

Report Dialog

Below is the Report Dialog that allows you to select different options in the reports.

Show All Users	Include all users in the report.
Show User in Groups	Include only users in a selected group via the Groups Dialog.
Show Groups	Show a report of groups instead of users.
Groups	Choose group(s) via the Select Groups Dialog for the report.
Select Groups Dialog

This Group Dialog box allows you to select the group(s) to be included in the report.

This is a Top Talker Report with the Show Groups option selected.  It shows the traffic generated according to different groups instead of users.

This is a Top Talker Report with the Show Users in Groups option selected.  It shows the traffic generated by user in group “Kan Test Lab.”


Scheduling of Reports

You can create a schedule to generate reports periodically such as on a daily, weekly, and monthly basis.  You can specify whether to send the report via email or save it to a file.

Report scheduling is best suited for unattended operation.  This allows greater automation and saves you more time and money.

See Report Scheduling Dialog for detailed information to schedule reports.


Users Timeline Report

Select “Timeline” and then “Users” from the menu “Reports” to go to the Sites Timeline Report dialog.

This report can show all the detail Internet sites traffic information for either a specified user or all users.

Users Timeline Report Dialog

This dialog allows you to specify the following for the Users Timeline Report:

•	A specific 24-hour period

•	Either all accessed sites or a specific accessed site

Last 24 hours	Generates a report on the last 24 hours of data.

Day starting	Generates a report on a specified date and time.

Show details for	Generates a report on a specific site or all sites.

Note that you cannot specify a specific site on the Users Timeline Report dialog.  You can only generate a user’s timeline report on a specific site via a right-mouse-click on a site name on other reports.

Report Description

This report shows all the users that have accessed a specific Internet site or all accessed Internet sites.

The report will always be in a 24-hour period and measure in volume of kilobytes of data transferred.

Upper half

It shows the total traffic volume generated by users accessing a specific site or different sites.

Lower half

It shows the timeline of user(s) accessing Internet sites.   The color of the bar indicates the productive rating of the accessed site(s):

1.	Productive

2.	Unproductive

3.	Neutral

4.	Not Rated

The thickness of the bars indicates the relative volume of traffic.  If the bar is thick, the volume of the traffic is big.  If the bar is thin, the volume of the traffic is less.

All Sites

This report shows the timeline of when each user in the organization is accessing different Internet sites.

One Site

This report shows the timeline of when each user in the organization is accessing a specific Internet site (milpitas01.pop.internex.net).

See also

Quick Access Via Mouse Clicks

Sites Timeline Report

Network Bandwidth Analysis


Sites Timeline Report

Select “Timeline” and then “Sites” from the menu “Reports” to go to the Sites Timeline Report dialog.

This report can show all the detail Internet sites traffic information for either a specified user or all users.

Sites Timeline Report Dialog

This dialog allows you to specify the following for the Site Timeline Report:

•	A specific 24-hour period

•	Either all users or a specific user

Last 24 hours	Generates a report on the last 24 hours of data.

Day starting	Generates a report on a specified date and time.

Show details for	Generates a report on a specific user or all users.

Report Description

This report shows all the Internet sites traffic information for all the users in the organization.

The report will always be in a 24-hours period and measure in volume of kilobytes of data transferred.

Upper half

It shows the total traffic volume generated for a specific user or all users accessing different Internet sites.

Lower half

It shows the timeline of user(s) accessing different Internet sites.   The color of the site name and bar indicates the productive rating:

1.	Productive

2.	Unproductive

3.	Neutral

4.	Not Rated

The thickness of the bars indicates the relative volume of traffic.  If the bar is thick, the volume of the traffic is big.  If the bar is thin, the volume of the traffic is less.

All Users

This report shows the timeline of when each Internet site is being accessed by all users in the organization.

One User

This report shows the timeline of when each Internet site is being accessed by a specific user ([Blister]).

See also

Quick Access Via Mouse Clicks

Users Timeline Report

Network Bandwidth Analysis


Access Log Report
Access Log Reports

These reports are commonly used for showing when, what, and how much a user is downloading from a site.

Users Access Log:

You can run this report for all users, or a specific user on your network for any time period.

The Summary will show you a listing of domain names visited.  If Details are selected,

everything that was downloaded from the site will be shown, such as .jpg and .html files.

Sites Access Log:

You can choose either All Sites, or a specific site from the dialog box.

If Summary is chosen, you will see a list of sites, and the users that visited them.  Details (shown) will show exactly what was downloaded from the site by each user.

Access Logs for Windows95:

Due to the Access database being available for WindowsNT only, the Category, KB, and Duration columns are not available for Windows95 copies of LittleBrother.

Top Site Report

The Top Site report can be generated by time and by volume. It has chart and table styles. Select “Top Site” from the menu “Report”.

This report shows the most accessed sites from 03/31/97 to 04/01/97.   Each bar indicates a site that is accessed by users in the network.  The right column specifies the most active user in each site and the total time of all users who have accessed that site.  The color of the bar indicates how the site is rated.

You can set the selection of the report from the Report Dialog.

Report in Table

Column Title	Description
Name	Specify the site name
Time	Specify the total estimated time spent in hour:min
Volume	Specify the total size of the traffic in kilo bytes
Main Destination	Specify the top user/group for this site  (Only if “Show Main Destination” is selected)
Previous (Day/Week/Month)	Specifies the historical/baseline data to compare with the current one

This report shows the most accessed sites by groups with the option of Baseline Comparison selected.

This report shows the most accessed sites by users in group Quality Assurance.

See also

How to block a specific site?

Network Application Monitor

Productive Site

Unproductive Site

Site Detail Report

Report Dialog


User Detail Report

Select “User Detail” from the menu “Reports” to go to the Select Node dialog.

The User Detail report then searches the database and finds matched access records for that user. It also lists how long the user accesses each site.

This report shows the most accessed sites from 03/31/97 to 04/01/97.   Each bar indicates a site that is accessed by users in the network.  The right column specifies the most active user in each site and the total time of all users who have accessed that site.  The color of the bar indicates how the site is rated.

Select Node Dialog

Show detailed statistics for: 	List all the available users in the specific time period.  Select one.

Since	Specify the starting of the time period.

Until	Specify the ending of the time period.

Note that the user list only contains those users who are within the shown time period, and this time period is based on the currently selected report.  If there is no report, the last hour is used.

Report in Table

Column Title	Description
Name	Site name that the specified user has visited
Time	Specify the total estimated time spent in hour:min
Volume	Specify the total size of the traffic in kilo bytes
Main Destination	Specify the top user/group for this site  (Only if “Show Main Destination” is selected)
Cost	Estimated cost of the usage
Previous (Day/Week/Month)	Specifies the historical/baseline data to compare with the current one

See also

Productive User

Unproductive User

Top Talker Report

Report Dialog


Top Talker Report

The Top Talker report can be generated by time and by volume. It has chart and table styles. Select “Top Talker” from the menu “Report”.

This report shows the most active users from 03/31/97 to 04/01/97.   Each bar represents a user and the most active site for that user on the right hand column.  The number on the right column specifies how long each user stays during the specified period.   The color of the bar indicates how the site is rated.

You can set the selection of the report from the Report Dialog.

Report in Table

Column Title	Description
Name	Specify the name of the user/computer or group
Time	Specify the total estimated time spent in hour:min
Volume	Specify the total size of the traffic in kilo bytes
Main Destination	Specify the top site for this user or computer  (Only if “Show Main Destination” is selected)
Cost	Estimated cost of the usage
Previous (Day/Week/Month)	Specifies the historical/baseline data to compare with the current one

This report shows the most active groups with both options of Cost Analysis and Baseline Comparison selected.

This report shows the most active users in group Quality Assurance.

Technical Note: LittleBrother uses the subnet mask gathered to determine whether the TCP/IP traffic is Internet or local.

See also

How to show who is playing network games?

Network Application Monitor

Productive User

Unproductive User

User Detail Report

Report Dialog


Site Detail Report

Select “Site Detail” from the menu “Reports” to go to the Select Node dialog.

The Site Detail report then searches the database and finds matched access records for that site. It also lists which user or workstation visits the site, how long it stays, and when.

This report shows detail activities for user Cam on computer Campaq_p133 from 03/31/97 to 04/01/97.   Each bar represents a site he/she has visited during the specified period and for how long.   The color of the bar indicates how the site is rated.

Select Node Dialog

Show detailed statistics for: 	List all the available sites in the specific time period.  Select one.

Since	Specify the starting of the time period.

Until	Specify the ending of the time period.

Note that the site list only contains those sites that are within the shown time period, and this time period is based on the currently selected report.  If there is no report, the last hour is used.

Report in Table

Column Title	Description
Name	Name of the user or computer that visited the specified site
Time	Specify the total estimated time spent in hour:min
Volume	Specify the total size of the traffic in kilo bytes
Previous (Day/Week/Month)	Specifies the historical/baseline data to compare with the current one

See also

Productive Site

Unproductive Site

Top Site Report

Report Dialog


Productive User

Select “Productive” and then “User” from the menu “Reports” to go to the Report dialog.

Similar to the Top Talker report, the Most Productive User report lists each user’s productive usage measured by either time or volume.  The users in the report are sorted according to their productive usage amount.

You can create a “Productive User” report from the “Top Talker” report.  To do that, you need to select “Productive” in the “Traffic Type”.

This report shows the most active users who are accessing productive sites from 03/31/97 to 04/01/97.  Each bar represents a user and the most active site for that user on the right hand column.  The number on the right column specifies the total productive time for each user during the specified period.   This report is colored by the network application.  That means each color in the bars represents a specific network application.

See also

Network Application Monitor

Top Talker Report

Unproductive User

User Detail Report

Report Dialog


Productive Site

Select “Productive” and then “Site” from the menu “Reports” to go to the Report dialog.

Similar to the Top Talker report, the Most Productive Site report lists each site that is accessed by users.  It is measured either by time or volume.  The sites in the report are sorted according to their access amount.

This report shows the most accessed sites that are rated productive from 03/31/97 to 04/01/97.   Each bar represents a site that is accessed by users in the network.  The right column specifies the most active user in each site and the total time of all users who have accessed that site.  This report is colored by the network application.  That means each color in the bars represents a specific network application.

See also

Network Application Monitor

Top Site Report

Unproductive Site

Site Detail Report

Report Dialog


Unproductive User

Select “Unproductive” and then “User” from the menu “Reports” to go to the Report dialog.

This report is very similar to the Most Productive User report.  The only difference is that this report accounts the unproductive usage instead of the productive usage in the Most Productive User report.

This report shows the most active users who are accessing unproductive sites from 03/31/97 to 04/01/97.  Each bar represents a user and the most active site for that user on the right hand column.  The number on the right column specifies the total unproductive time for each user during the specified period.   This report is colored by the network application.  That means each color in the bars represents a specific network application.

This report shows the most unproductive users and the associated cost of such lost productivity.  This report is created with both the Cost Analysis and Baseline Comparison option selected.

This report shows the most unproductive groups and the associated cost of such lost productivity.  This report is created with both the Cost Analysis and Baseline Comparison option selected.

See also

Network Application Monitor

Top Talker Report

Productive User

User Detail Report

Report Dialog


Unproductive Site

Select “Unproductive” and then “Site” from the menu “Reports” to go to the Report dialog.

This report is very similar to the Most Productive Site report.  The only difference is that this report accounts the unproductive usage instead of the productive usage in the Most Productive Site report.

This report shows the most accessed sites that are rated unproductive from 03/31/97 to 04/01/97.   Each bar indicates a site that is accessed by users in the network.  The right column specifies the most active user in each site and the total time of all users who have accessed that site.   This report is colored by the network application.  That means each color in the bars represents a specific network application.

This report shows the most unproductive sites and the users that access those sites the most.  This report includes the Baseline Comparison to show the same sites over the previous day.

See also

Network Application Monitor

Top Site Report

Productive Site

Site Detail Report

Report Dialog


Summary By Day

Select “Summary By Day” from the menu “Reports” to go to the Report dialog. You can generate a usage report on selection of days, report style, sort order, and traffic type.

Report in Table

Column Title	Description
Date	Date of the statistics
Time	Specify the total estimated time spent in hour:min
Volume	Specify the total size of the traffic in kilo bytes
Cost	Estimated cost of the usage

You can set the selection of the report from the Report Dialog.

This report shows the daily summary in terms of unproductive traffic and the associated cost of such lost productivity.

See also

Report Dialog

Daily Overview

Hourly Overview

Overview Report

Summary By Hour


Summary By Hour

Select “Summary By Hour” from the menu “Reports”.  You can generate a usage report on past hours, report style, sort order, and traffic type.

Report in Table

Column Title	Description
Hour	Hour of the statistics
Time	Specify the total estimated time spent in hour:min
Volume	Specify the total size of the traffic in kilo bytes
Cost	Estimated cost of the usage

This report shows the hourly summary in terms of unproductive traffic and the associated cost of such lost productivity.  This report includes the Baseline Comparison to show the same unproductive traffic over the previous day.

See also

Report Dialog

Daily Overview

Hourly Overview

Overview Report

User Overview Report

Summary By Day


Daily Overview

Select “Daily Overview” and “By User” from the menu “Reports” to go to the Report dialog. You can generate an overview report on selection of days, report style, sort order, and traffic type.

The Daily Overview report lists each day’s usage overview in a row.  Each day’s usage is rated into the following divisions: productive, unproductive, neutral, and not rated.  This report gives you an overview of how productive (or unproductive) your Internet access is each day.  The report can show either the top user or top site in each rating division.

Report in Table

Column Title	Description
Date	Date of the statistics
Productive	Usage of productive traffic (top user/group/site during that period)
Unproductive	Usage of unproductive traffic (top user/group/site during that period)
Neutral	Usage of neutral traffic (top user/group/site during that period)
Not Rated	Usage of not rated traffic (top user/group/site during that period)

You can set the selection of the report from the Report Dialog.

This report shows the daily overview of the Internet access by groups.

See also

Report Dialog

Hourly Overview

Overview Report

User Overview Report

Summary By Day

Summary By Hour


Hourly Overview

Select “Hourly Overview” and “By User” from the menu “Reports” to go the Report dialog. You can generate an overview report on past hours, report style, sort order, and traffic type.

The Hourly Overview report lists each hour’s usage overview in a column.  Each hour’s usage is rated into the following divisions: productive, unproductive, neutral, and not rated.  This report gives you an overview of how productive (or unproductive) your Internet access is each hour.  The report can show either the top user or top site in each rating division.

Report in Table

Column Title	Description
Hour	Hour of the day of the statistics
Productive	Usage of productive traffic (top user/group/site during that period)
Unproductive	Usage of unproductive traffic (top user/group/site during that period)
Neutral	Usage of neutral traffic (top user/group/site during that period)
Not Rated	Usage of not rated traffic (top user/group/site during that period)

You can set the selection of the report from the Report Dialog.

This report shows the hourly overview of the Internet access by groups.

See also

Report Dialog

Daily Overview

Overview Report

User Overview Report

Summary By Day

Summary By Hour


IP Table Report

Select “IP Table” from the menu “Reports” to go to the Select Time Range dialog. You can view the list of nodes with its latest IP, MAC address, and Name.

The IP Table report lists each computer discovered by LittleBrother.  The report shows the properties of each computer such as: IP Address, Machine Address, Computer Name, User Name, and LAN Adapter Vendor used in the computer.

This report is sorted by the IP address.

This report can give you a quick way to locate duplicate IP addresses.

Sorting Order

By default, the IP Table Report will sort by IP Address.  You can change the sorting order by double-clicking on the column heading.  For example, if you want to sort by Computer name instead, double-click on the “Computer” column heading.

Select Time Range Dialog

Since	Specify the starting of the time period.

Until	Specify the ending of the time period.

Use All available data	Use all data in the database and ignore the Since/Until

IP Table Report

Column Title	Description

IP	Specify the IP Address

MAC	Specify the Machine Address

Computer	Specify the computer name if available

User	Specify the user name or the computer name if available

Card Maker	Specify the manufacturer of the network adapter

See Also

How to check duplicate IP address?


Category Overview Report

This report shows which users are accessing certain categories.  It divides all Internet traffic into pre-defined categories, according to sites in the LittleBrother ratings database.

See also

Report Dialog

Daily Overview

Hourly Overview

User Overview Report

Summary By Day

Summary By Hour


Overview Report

Select “Overview” from the menu “Reports” to go to the Report dialog.

It shows the overall Internet traffic pattern of your LAN.  It divides all Internet traffic into four different ratings:

•	Productive

•	Unproductive

•	Neutral

•	Not Rated

Column Title	Description

Rating 	Specify the productive rating of the traffic

Share	Specify the share in percentage of the total Internet and/or Intranet traffic

TopTalker	Specify the top user during that period

See also

Report Dialog

Daily Overview

Hourly Overview

User Overview Report

Summary By Day

Summary By Hour


User Overview Report

This new report shows the overall Internet traffic pattern of users.  It  divides all Internet traffic into four different ratings: Productive, Unproductive, Neutral, and Not Rated.

This report shows the users Internet traffic pattern.

This report shows the groups Internet traffic pattern.

See also

Report Dialog

Overview Report

Daily Overview

Hourly Overview

Summary By Day

Summary By Hour


Report Dialog

Report Types

Specify the output format of the report.

•	Bar Chart	-	Report will be arranged in horizontal bars

•	Table	-	Report will be arranged in rows and columns

Measure By

Specify the measurement of the report.

•	Time	-	Report will be measured by the estimated time

•	Volume	-	Report will be measured by the size of data transferred

User/Group

Specify whether to show the traffic in terms of groups or users.

•	Show All Users	Include all users in the report.

•	Show User in Groups	Include only users in a selected group via the Groups Dialog.

•	Show Groups	Show a report of groups instead of users.

•	Groups	Choose group(s) via the Select Groups Dialog for the report.

Date Range

Specify the time range for the report.

•	Last Hour

•	Last Day

•	Last Week

•	Last Month

•	Last Quarter

•	Last Year

•	Specify Range	Specify the specific starting date and ending date

Traffic Type

Specify the types of traffic to be included.

•	All	Include all traffic

•	Productive	Include only productive traffic

•	Unproductive	Include only unproductive traffic

•	Not rated	Include only traffic that is not been rated

•	Specific Category	Include only the traffic classified as part of the selected category

Exclude Intranet

•	Check this to include only Internet traffic

•	Uncheck this to include both Internet and local network traffic (Intranet)

Show Main Destination

•	Check this to show the top user for the particular site or top site for the particular user

Color By

This allows you to specify which kind of logical interpretation applies to the Internet/network traffic.

It is because all Internet/network traffics carry multiple sets of logical information at the same time, and we can only represent one logical interpretation in a report.  There are three different ways to interpret the Internet/network traffic:

•	Incoming/Outgoing	Show different color based on inbound or outbound traffic

•	Application	Show different color based on the recognized network application.

•	Rating	Show different color based on productive rating of the traffic

LittleBrother uses different color systems to show these different logical interpretations.

Baseline Comparison

•	Include Baseline	Include baseline comparison on your report.

•	Choose Baseline	Select the baseline via the Choose Baseline Dialog.

Cost Analysis

•	Include Cost Analysis	Include cost analysis on your report.

•	Set Cost Per Hour	Set the actual cost per hour via the Set Cost Dialog.

See Also

Network Application Monitor

Network Bandwidth Analysis

How to monitor network application?

Report Wizard

Reporting System

Cost Analysis

Baseline Comparison

Show Traffic by Groups


Blocked Users/Blocked Sites

These reports can show you who tried to access sites that were blocked.  Blocked Sites will show you the list of sites that were attempted to be opened by users.

Top Talker Report

Productive User

User Detail Report

Report Dialog


Report Wizard

Select “Wizard” from the menu “Reports”.

The report wizard allows you to generate reports in both easy and well-explained steps.

Page 1

This page allows you to specify what is the report about:  Users or Sites.

Users

Reports will be on a specific user or all users.

Sites

Reports will be on a specific site or all sites.

Page 2

This page will allow you to specify the presentation format of the report.

•	Bar Chart	-	Report will be arranged in horizontal bars

•	Table	-	Report will be arranged in rows and columns

Page 3

This page will allow you to specify how to measure the Internet/network traffic in the report.  It can be either:

•	Time	-	Report will be measured by the estimated time

•	Volume	-	Report will be measured by the size of data transferred

Page 4

This page will allow you to specify whether to show the traffic in terms of groups or users.

•	Show All Users	Include all users in the report.

•	Show User in Groups	Include only users in a selected group via the Groups Dialog.

•	Show Groups	Show a report of groups instead of users.

•	Groups	Choose group(s) via the Select Groups Dialog for the report.

Page 5

This page will allow you to specify the date range of the report.  This will allow you to generate a report only on a specific date.

•	Last Hour

•	Last Day

•	Last Week

•	Last Month

•	Last Quarter

•	Last Year

•	Specify Range	Specify the specific starting date and ending date

Page 6

This allows you to specify which kind of logical interpretation applies to the Internet/network traffic.

It is because all Internet/network traffics carry multiple sets of logical information at the same time, and we can only represent one logical interpretation in a report.  There are three different ways to interpret the Internet/network traffic:

•	Incoming/Outgoing	Show different color based on inbound or outbound traffic

•	Application	Show different color based on the recognized network application.

•	Rating	Show different color based on productive rating of the traffic

LittleBrother uses different color systems to show these different logical interpretations.

Page 7

This page will allow you to specify different options on the report.

Exclude Intranet

•	Check this to include only Internet traffic

•	Uncheck this to include both Internet and local network traffic (Intranet)

Show Main Destination

•	Check this to show the top user for the particular site or top site for the particular user

Baseline Comparison

•	Include Baseline	Include baseline comparison on your report.

•	Choose Baseline	Select the baseline via the Choose Baseline Dialog.

Cost Analysis

•	Include Cost Analysis	Include cost analysis on your report.

•	Set Cost Per Hour	Set the actual cost per hour via the Set Cost Dialog.

See Also

How to monitor network application?

Report Dialog

Reporting System


Configuration & Dialog Boxes

LittleBrother Administrator

Restrict User Access

Site Category and Rating

Blocking Dialog

Edit Rule Dialog

Rule Time Restriction Dialog

Alert

Alert and Log Report

Email

IP Address Configuration

Group Configuration Dialog

Web Server

Import Groups

Site Properties Dialog

User Properties Dialog

Preferences Dialog

License Upgrade

Comments Dialog

About Dialog


LittleBrother Administrator

This is a separate application that contains most of the administrative tools used by LittleBrother including:

Network Configuration	To configure IP Addresses.
Password	To configure password protection for accessing and modifying LittleBrother information and configurations.
Email Server	To configure the SMTP Email Server.
Managing Database	To backup and/or restore the LittleBrother database.
View Log File	To view the alert log file.
Start LB Service	To start the LittleBrother service (Client/Server installation only)
Stop LB Service	To stop the LittleBrother service (Client/Server installation only)


User Properties Dialog

This dialog allows you to view and modify the properties of the user computer.  This includes the following:

•	Computer name

•	User name

•	IP Address

•	MAC Address

•	Network Interface Card (NIC) Vendor

Modify Computer Name

Note that the computer name and user name may take time to be discovered.  However, you can always type in or change the computer name as you want.  The new computer name entered or changed will take effect in the database and will be displayed in another report.

In order to distinguish the name that is discovered and entered or changed by the user, LittleBrother will automatically append a dot “.” at the end of the new computer name.

For example, if you enter or change the site name

SALES01_PC

it will show

SALES01_PC.

instead of

SALES01_PC

Pay attention to the extra dot “.” at the end of the name.

How to Bring Up This Dialog

You can bring up this dialog box by mouse clicking on the user/computer name that appears on any report in chart form including the main view.

There are two different mouse clicks to bring up this dialog box:

•	Double left mouse click on the user/computer name

•	Right mouse click on the user/computer name to bring up the property popup menu and select Properties

See also

Quick Access Via Mouse Clicks

Site Properties Dialog


Site Properties Dialog

This dialog allows you to view and modify the properties of the user computer.  This includes the following:

•	Site name

•	IP Address

•	Category

This dialog also allows you to have a quick access to that site.  You can either go to the specified site via:

•	Web access

•	FTP access

Modify Site Name and Category

Note that the site name may take time to be discovered, and therefore, the category will not be available.  You can always type in or change the site name and category as you want.  The new site name and category entered or changed will take effect in the database and will be displayed in another report.

In order to distinguish the name that is discovered and entered or changed by the user, LittleBrother will automatically append a dot “.” at the end of the new site name.

For example, if you enter or change the site name

www.abc.com

it will show

www.abc.com.

instead of

www.abc.com

Pay attention to the extra dot “.” at the end of the name.

How to Bring Up This Dialog

You can bring up this dialog box by mouse clicking on the site name that appears on any report in chart form including the main view.

There are two different mouse clicks to bring up this dialog box:

•	Double left mouse click on the site name

•	Right mouse click on the site name to bring up the property popup menu and select Properties

See also

Quick Access Via Mouse Clicks

User Properties Dialog


Alert and Log Report

Select “View Log File” from the “File” menu in the LittleBrother Administrator module. You can view past alerts and logs kept by LittleBrother. It lists when LittleBrother starts and ends, which user exceeds usage limit, when unusual activity happens at night, and so on.

Note that the Alert and Log report is done through a text-file and viewed via the standard notepad application.  Please do not modify the text file.

See Also

How can I know if someone is overusing the Internet?

Alert

Email


Web Server

The Web Server allows users to access LittleBrother’s reports remotely, from any frames-capable browser.  This dialog will allow you to configure the LittleBrother Web Server for different port usage, or to disable it completely.

Note: If LB is placed on a machine with Microsoft IIS (Internet Information Server) already installed, you can either disable the Apache Web Server here, enable Apache to use a different port, or copy all the *.htm files in the LB directory to your IIS directory.

We also recommend that a password be placed on your database, to provide protection from illegal use.


Rating Update

This option allows your copy of LittleBrother to automatically download the latest LittleBrother ratings database (klbdbase.rtg) from our web server.  This option is available for paid customers of LittleBrother only.

When enabled, LittleBrother will download the update every two weeks at midnight on the specified date.

Note:

The LittleBrother Rating Update option will only function on Windows NT4.0, when LittleBrother is installed as a service (client/server).

To receive an update via email, send an email to newdb@kansmen.com, along with your serial number.  You will then be placed on a mailing list that will send updates out every two weeks.


Password

You can enable password protection to prevent other people’s access to the LittleBrother database.  Select “Password” from the “Tools” menu in the LittleBrother Administrator module.   To change the Administrator’s password, click on << Admin (Read/Write) >>.  Then change the password to whatever you wish to specify.  A << Global Red Only >> password will allow access to all LB reports.  Different groups of users can also be given different passwords, so that they can see the users in their group only.  The groups can be given read access only.


Restrict User Access

LittleBrother allows you to specify site-blocking rules to limit particular protocols or unproductive sites from being accessed by a group of users.

To add rules, select “Blocking” from the “Tools” menu. Choose New to add a new rule to the access policy. A unique name must be given to each rule. Rule has 2 types: Permit or Deny. From the Services section, you can specify whether to permit or deny all services, service port, well-known service. From the Sites section, you can specify whether to permit or deny all sites, a particular IP site, a site with DNS, or sites of a particular category. Each rule can apply to a selection of users.

See Also

How to use the blocking?

How to block a specific category?

How to block a specific site?

How to block all access except for a specific category?

How to block FTP/ Usenet etc?

Site Category and Rating

Blocking Dialog


Importing Groups

This option allows you to import user groups into LittleBrother from a CSV (Comma Separated Value) file.  This makes it easier to assign groups, without having to select

users from a list.

The file must be organized with rows and columns. (example below)

Each row defines a record.

Each column defines a attributes within a record.

First row must be the column heading - "Group","PC Name","IP"

Definitions:

"Group"   - First column specifies the group name

"PC Name" - Second column specifies the name of the PC

"IP"      - Third column specifies the IP address ( or IP address range )

Each subsequent row follows the above format to define groups.

Note that you can only define by either "PC Name" or "IP", but not both.

A user can only be in one group at a time.  Duplicates will be removed.

CSV Text File Example:

"Group"         ,"PC Name"          ,"IP"

"NetAdmin"      ,""                 ,"38.170.72.80 - 38.170.72.88"

"Sales"         ,"Dan_nt401"        ,""

"Marketing"     ,"Dan_Admin"        ,""

"Sales"         ,"Dan_nt402"        ,""

"Marketing"     ,"Dan_Marketing"    ,""

"Accounting"    ,""                 ,"38.170.72.80"

"Accounting"    ,""                 ,"38.170.72.80"

"Accounting"    ,""                 ,"38.170.72.81"


IP Address Configuration

This dialog allows you to enter or modify the IP address and subnet mask of your computer.  Select “Network Config” from the “Tools” menu in the LittleBrother Administrator module.

What is my IP	This brings up a dialog box to show detailed IP information.
Advanced	This brings up the Advanced IP Address Configuration Dialog.

Note:  LittleBrother will attempt to automatically resolve the IP address and subnet mask of your computer during startup.  However, in some cases, especially in Windows 95, LittleBrother may not be able to locate the IP address.  This may cause LB not to monitor any traffic.  Enter your IP Address and Subnet mask in this field if necessary.

If there is no IP address specified, the Advanced button will be disabled.  To enable the Advanced button, make sure that an IP address is shown in the appropriate field.


Advanced

This dialog box allows you to support multiple subnets.  If you have multiple subnets on your network and want to support all of them, enter the IP address and subnet mask pair for each subnet.

For instance, if you would like to monitor your Class B network in the range of 203.220.13.1-203.220.14.255, simply type in 203.220.0.0 with a subnet mask of 255.255.0.0.  This will allow LB to monitor everyone on that subnet.

Add	Adds the IP Address and Subnet Mask to the list of IP Networks.
Remove	Removes the selected IP Networks from the list.
IP Address	Specifies the IP Address to add.
Subnet Mask	Specifies the subnet mask to add.
List of IP Networks	Lists of IP Networks to be supported.


Site Category and Rating

Select “Rating” from the menu “Tools”. You can assign each category with rating: Productive, Unproductive, Neutral, or Not Rated. LittleBrother categorizes all Internet sites into more than 40 useful groups. Rating is used in a report. Each rate has its unique color.

When you change the selection on the category list on the left hand side, the rating radio buttons on the right hand side will be changed accordingly.

To modify the rating on a specific category:

1.	Select the category from the list

2.	Select the correct rating radio button

3.	Press the OK button

See Also

How to change the rating on the categories?

How to block a specific category?

Restrict User Access

Blocking Dialog


Alert

Select “Options” from the “Tools” menu, then select the Alert page. You can specify each alert’s threshold and optional action: send by email.  Each alert has a descriptive name and enable/disable option.

List of Alert

User Usage Alert

This alert, when enabled, will be generated for any user if his/her total time spent on the Internet is exceeding the specified threshold.

Usage Overnight Alert

This alert, when enabled, will be generated for any user if his/her total time spent at night on the Internet is exceeding the specified threshold.

New Site Alert

This alert, when enabled, will be generated when any new site is found.

New User (IP) Alert

This alert, when enabled, will be generated when any new user or IP address is found.

List of Alerts	Lists all the available alerts.
Enable	Enables the report for scheduling.
Every day at the time	Specifies the time of the day to determine the alert.
At interval of every	Specifies the interval in hours to determine the alert.
From	Specifies the starting time to be considered for the alert.
To	Specifies the ending time to be considered for the alert.
Threshold (hours)	Specifies the threshold in hours that will trigger the alert.
send email to	Specifies the Internet email address of the report recipient.

See Also

How can I know if someone is overusing the Internet?

Alert and Log Report

Email


Email

All the alerts and report scheduling can be configured to be sent as email if an SMTP email system is installed.  Select “Email Server” from the “Tools” menu under the LittleBrother Administrator.

SMTP Mail Server IP	Specifies the IP Address of the SMTP Mail Server.
Admin Email Address	Specifies the Internet email address of the administrator.

See Also

Alert and Log Report


Preferences Dialog

Select “Options” from the menu Tools, select the Preferences page.

You can modify the following default settings:

•	Default fonts

•	Action associated with left mouse button double-click

Double-Click Report

These radio buttons allow you to choose the default action associated with the left mouse button double-click.  You can choose one of the following:

Ask every time	Do not want to have a default action.  Will ask every time you double-click.

Timeline	Bring up the corresponding timeline (users/sites) report.

Detail	Bring up the corresponding detail (users/sites) report.

Report

Pressing this button will bring up a Font dialog to allow you to change the default font for the report (including the main view).

Printer Report

This allows you to change options for reports that are printed on paper using LittleBrother.

See Also

User Detail Report

Site Detail Report

Users Timeline Report

Sites Timeline Report


License Upgrade

Select “License Upgrade” from the menu “Help” to upgrade your license. LittleBrother has license for 10, 25, 50, and 100 users.   Contact Kansmen for special pricing on site licensing.

To view your current license information, see About Dialog .


Registration

Select “Electronic Registration” to register your LittleBrother with Kansmen Corporation. You can benefit from the latest update of LittleBrother, new products information, and fast technical support.

Thank you for choosing Kansmen’s LittleBrother.


About Dialog

This dialog box shows you different kinds of information about your LittleBrother software.  It includes:

•	Version of the software

•	License type

•	Serial number

•	Exact date and time of the files

Info…

Pressing this button will bring up the Info dialog that shows you the detail information on LittleBrother files.


Comments Dialog

Select “Send us Feedback” to let us know about your comments on LittleBrother.  Comments are directed to our feedback database.

Customers come first!  We always try to serve our customers better.  Sending us your comments can help us serve you better.


Blocking Dialog

This dialog allows you to create, modify, and delete blocking rules.  It also allows you to specify how each rule should be applied to the user.

The Rules, on the left hand side, lists all the available rules.  The list of Affected Users, on the right hand side, lists all the discovered users in the network.

Rules

This lists all the defined rules.

New

This will bring up the Rule dialog to create a new rule.

Edit

This will bring up the Rule dialog to modify the selected rule.

Remove

This will delete the selected rule.

Affected Users

This lists all the available users and allows you to specify which user(s) should be applied to each rule.  You should select a specific rule in the rule list.  Then select the specific user that the selected rule should apply to.

Selecting <<New Users>> on the Affected User list means automatically to apply the selected rule to all new user(s).

Select All

This button will select all the users in the list box.

Clear All

This button will deselect all the users in the list box.

Groups

This button will bring up a group dialog to select a user by group.  This dialog will show all the defined groups, and you can therefore select users by selecting specific groups.

Note that you need to define groups in the Group Configuration Dialog.

OK

Confirm the modification and close the dialog box.

Cancel

Cancel all the modifications since the last “Apply” and close the dialog box.

Apply

Confirm the modification right now.

Help

Bring up the help file.

See Also

Edit Rule Dialog

Rule Time Restriction Dialog

Group Configuration Dialog


Edit Rule Dialog

This dialog box allows you to specify what is in the blocking rule.  This dialog will be presented both to create and modify a rule.

Rule Type

This specifies the nature of the rule.

Permit

This specifies the rule that will allow a specific access.

Deny

This specifies the rule that will deny a specific access.

Rule Name

Specify the name of the rule.  Make sure each rule name is unique.

Services

This area specifies that the access will be permitted or denied based on the nature of the source traffic protocol.

All

Everything is included.

IP Port Number

Checking this means the access will depend on the IP port number specified.

Service

Checking this means the access will depend on the known Internet traffic type such as:

•	WEB	Accessing a Word Wide Web site

•	FTP	Accessing a File Transfer Protocol site

•	Usenet	Accessing a usenet news

•	Telnet	Using telnet

•	Gopher	Accessing a gopher site

•	Email	Sending email message.

(This does not apply to corporate-wide email package such as groupwise, MS Exchange, and CC Mail.)

Sites

This area specifies that the access will be permitted or denied based on the destination Internet site.

All

Everything is included.

IP Address

Checking this means the access will depend on the destination IP address.

Name

Checking this means the access will depend on the name of the destination site.  The space below allows you to specify the destination site name (URL) to check.

•	Exact Match	indicates that the specified name (URL) has to be matched exactly.

Category

Checking this means the access will depend on the category of the destination site.  You can select the category of sites that will be permitted or denied.

URL Keyword

Checking this means the access will depend on the name of the destination address (URL).  The space below allows you to specify the Keyword, when matched with the URL of the destination address, will activate the rules.

Keyword Blocking allows you to fine-tune our blocking technology even more.  Using "sex" as an example for the Keyword Blocking, you can block any URL or Domain Name with the word "sex" in it, that is, sexia.com and freesex.com.  The ability to create custom blocking messages is also available.  Groups of users can also have rules applied to them, at your discretion.

OK

Confirm the modification and close the dialog box.

Cancel

Cancel all the modifications and close the dialog box.

Advanced

Bring up the Rule Time Restriction dialog to specify the time range for the rule.

See Also

Blocking Dialog

Rule Time Restriction Dialog


Rule Time Restriction Dialog

Press the “Advanced” button in the Edit Rule dialog to bring up this dialog box.  This dialog box allows you to specify what is the time schedule to apply the blocking rule.  This dialog will be presented to both the permit and deny rules.

The following example shows how to apply the deny blocking rule only on weekdays from 6:00 am to 7:00 pm.

To select the time range on a specific day:

1.	Press the “Control” key

2.	Click on the beginning time-range while holding the “Control” key down

3.	Drag the mouse downward to the ending time-range while holding the “Control” key down

4.	Release the “Control” key

See Also

Edit Rule Dialog

Blocking Dialog


Group Configuration Dialog

Select “Groups…” from the menu “Tools” to configure users into different groups.

This dialog box allows you to define user groups.  You can group users into different groups that you can use to assign different access rights easily.  It will better represent the departmental group that may exist in your organization.

For example, you can create a group called Quality Assurance that is only restricted to access “Computing” Internet sites because it needs those sites to get new hardware/software information.

The listbox on the left contains the current selected users in the specified group.  The listbox on the right contains all available users discovered.  A user can be in only one group at a time.

Add

This button will add the selected user into the specified group.  That is from the right listbox to the left listbox.  Double-clicking the item on the right listbox will achieve the same result.

Remove

This button will remove the selected user from the specified group.  That is from the left listbox to the right listbox.  Double-clicking the item on the left listbox will achieve the same result.

Defined by Users

This option will allow you to select the members of the group by user name.

Defined by IP Ranges

This option allows you to set group members by IP Range, whether they are detected or not.

Select Range

This selects users by the IP Address, if they have already been detected..

OK

Confirm the modification and close the dialog box.

Cancel

Cancel all the modifications and close the dialog box.

New Group

This button will bring up a New Group dialog to create and type in a new group name.

See Also

Blocking Dialog


Report Scheduling Dialog

Select “Options” from the “Tools” menu, then select the Report Schedule page. You can specify any report to be generated automatically according to the schedule.  Reports can be scheduled daily, weekly, and monthly.  The scheduled report can be sent to you via email or exported as a file.

In order to receive an email report, the SMTP mail server must be configured correctly in the Email Server Configuration dialog box under the LittleBrother Administrator.

New	Create a new report to schedule.
Rename	Rename the selected scheduled report.
Delete	Delete the selected scheduled report.
Enable	Enable the report for scheduling.
Daily	Generate a report daily.
Weekly	Generate a report weekly.
Monthly	Generate a report monthly.
At	Specify the exact time of the day to generate the report.
By Email	Send the report to recipients via email.
Saved as File	Save the report to a fixed location.
Email	Specify the Internet email address of the report recipient.
Edit	Modify the report options.
Date sent:        Wed, 31 Dec 97 16:45:03 Pacific Standard Time

From:             Kan@kansmen.com

Subject:          Most Unproductive User

To:               Kan@kansmen.com

report

Most Unproductive User

created at: 12/31/1997 16:45

report from: 12/24/1997 16:45 to 12/31/1997 16:45

Name                  Time     Volume      Cost

Admin [NT100]        16:04  242678 KB   $482.00

Test2 [Test_nt40w_1] 10:05   14713 KB   $302.50

[Appendix]            8:58   47670 KB   $269.00

[Sales_03]            0:15     411 KB     $7.50

[Elvis]               0:14     465 KB     $7.00

[Blister]             0:13     157 KB     $6.50

Mbrew [Brewte]        0:02      93 KB     $1.00

[486-66 test]         0:02       0 KB     $1.00

Test4 [Blister]       0:01       2 KB     $0.50

[NT150]               0:01       0 KB     $0.50

-----------------------------------------------

Cost                                   $1077.50

Above is an example of the scheduled report received by email.  This report shows the most unproductive users in the past week and the cost of such lost productivity.  This is a Top Talker Report with the option of Unproductive traffic and Cost Analysis selected.


Server Location Dialog

Select “Options” from the “Tools” menu, then select the Server Location page. This optional dialog box will only be available if you select the Client/Server installation.  You can specify the exact server location by name or IP Address.

Server is on local machine	Both client and server and on the same computer.
Server is on remote machine	You need to specify the remote server either by computer name or IP Address.


How To

How can I know if someone is overusing the Internet?

How to block a specific category?

How to block a specific site?

How to block all access except for a specific category?

How to block all access except to a specific one site?

How to block all users access to Sex/Pornography?

How to block FTP/ Usenet etc?

How to change the rating on the categories?

How to check duplicate IP address?

How to generate a report on users accessing restricted sites?

How to select the specific user to track?

How to show who is playing network games?

How to use the blocking?

How to view or modify user/computer properties

How to view or modify a specific Internet site property

How to change the category of the Internet site

How to monitor network application?

How to change font?

How to resize the main view?

How to support mulitple network segments?

How to support multiple subnet?

See Also

Troubleshooting

Frequently Asked Questions (FAQ) for some of our answers.


How to use the blocking?

1) You have to set up the blocking rules.

Go to the Blocking dialog by selecting “Blocking...” under the menu “Tools”.  By default, LittleBrother provides two rules:

•	Deny Sex/Porn.  	(Deny user(s) access to sex or pornography sites)

•	Deny Shopping.	(Deny user(s) access to shopping sites)

2) Apply rules to users.

•	Select the rules you want to activate (example, Deny Sex/Porn).

•	Select the user(s) you want the rule to apply to.

3) Repeat step 2 for different rules you want to activate.

4) Click OK when done.

That’s it.  Now the blocking will be activated.

For a quick example, see How to block all users access to Sex/Pornography?

See also

How To

Blocking Dialog

Site Category and Rating


How to block all users access to Sex/Pornography?

1.	Go to the Blocking dialog by selecting “Blocking...” under the menu “Tools”.

2.	Select the rule “Deny Sex/Porn”.

3.	Click on the “Select All” button to apply the rules to all users.

4.	Click the “OK” button to confirm and close the dialog.

See also

How To

Blocking Dialog

Site Category and Rating


How to block FTP/ Usenet etc?

The following is a step by step example on setting up to block FTP services:

.

1)  You have to create a new rule to deny access to the service.

•	Go to the Blocking dialog by selecting “Blocking...” under the menu “Tools”.

•	Click on the “New...” button to open the “Edit Rule” dialog.

•	Select “Deny” under the rule type.

•	Specify a unique rule name on the “Rule Name” field such as “Deny FTP”.

•	Select the “Service” radio button under “Services”.

•	Select the service name in the field below such as “FTP”.

•	Click the “OK” button to confirm and close the dialog.

Now the new rule (Deny FTP) will show up on the list of rules.

2) You have to apply the rule to the users.

•	Select the new rules (Deny FTP).

•	Select the user(s) you want the rule to apply to.

•	Click OK when done.

That’s it.  Now the service will be blocked for the selected user(s).

Access to the specified service will be blocked. If you want to block a service that does not appear in the service list, you can specify the IP port number that the service uses.

See also

How To

Blocking Dialog

Site Category and Rating


How to block a specific site?

The following is a step by step example on setting up to block site “XYZ.com”:

1)  You have to create a new rule to deny access to the specific site.

•	Go to the Blocking dialog by selecting “Blocking...” under the menu “Tools”.

•	Click on the “New...” button to open the “Edit Rule” dialog.

•	Select “Deny” under the rule type.

•	Specify a unique rule name on the “Rule Name” field such as “Deny XYZ”.

•	Select the “Name” radio button under “Sites”.

•	Specify the site name in the field below such as “XYZ.com”.

•	Click the “OK” button to confirm and close the dialog.

Now the new rule (Deny XYZ) will show up on the list of rules.

2) You have to apply the rule to the users.

•	Select the new rules (Deny XYZ).

•	Select the user(s) you want the rule to apply to.

•	Click OK when done.

That’s it.  Now the specific site will be blocked for the selected user(s).

See also

How To

Blocking Dialog

Site Category and Rating


How to block a specific category?

The following is a step by step example on setting up to block all sites categorized as “Network Games”:

1) First you have to create a new rule to deny access to the specific category.

•	Go to the Blocking dialog by selecting “Blocking...” under the menu “Tools”.

•	Click on the “New...” button to open the “Edit Rule” dialog.

•	Select “Deny” under the rule type.

•	Specify a unique rule name on the “Rule Name” field such as “Deny Network Games”.

•	Select the “Category” radio button under “Sites”.

•	Select a specific category (Network Games) from the category list.

•	Click the “OK” button to confirm and close the dialog.

Now the new rule (Deny Network Games) will show up on the list of rules.

2) You have to apply the rule to the users.

•	Select the new rules (Deny Network Games).

•	Select the user(s) you want the rule to apply to.

•	Click OK when done.

That’s it.  Now the sites that are rated for Network Games will be blocked for the selected user(s).

See also

How To

Blocking Dialog

Site Category and Rating


How to block all access except to a specific one site?

The following is a step by step example to allow access only to site “XYZ.com”:

1) You have to create a new rule to deny access to all sites.

•	Go to the Blocking dialog by selecting “Blocking...” under the menu “Tools”.

•	Click on the “New...” button to open the “Edit Rule” dialog.

•	Select “Deny” under the rule type.

•	Specify a unique rule name on the “Rule Name” field such as “Deny All”.

•	Select the “All” radio button under “Sites”.

•	Click the “OK” button to confirm and close the dialog.

Now the new rule (Deny All) will show up on the list of rules.

2) You have to apply the new rule (Deny All) to the user(s).

•	Select the new rule (Deny All).

•	Select the user(s) you want the rule to apply to.

3) You have to create a new rule to allow access to the specific one site (XYZ.com).

•	Click on the “New...” button to open the “Edit Rule” dialog.

•	Select “Permit” under the rule type.

•	Specify a unique rule name on the “Rule Name” field such as “Permit XYZ.com”.

•	Select the “Name” radio button under “Sites”.

•	Specify the site name to allow access in the field below such as “XYZ.com”.

•	Click the “OK” button to confirm and close the dialog.

Now the new rule (Permit XYZ) will show up on the list of rules.

4) You have to apply the new rule (Permit XYZ) to the user(s).

•	Select the new rule (Permit XYZ).

•	Select the user(s) you want the rule to apply to.  (Make sure you select the same users as in step 2.)

•	Click OK when done.

That’s it.  Now the selected users can only have access to site XYZ.com.

Note that if you want to allow a few more sites, repeat step 3 and 4 for each site.

See also

How To

Blocking Dialog

Site Category and Rating


How to block all access except for a specific category?

The following is a step by step example to allow access only to a site categorized as “Computing”:

1) You have to create a new rule to deny access to all sites.

•	Go to the Blocking dialog by selecting “Blocking...” under the menu “Tools”.

•	Click on the “New...” button to open the “Edit Rule” dialog.

•	Select “Deny” under the rule type.

•	Specify a unique rule name on the “Rule Name” field such as “Deny All”.

•	Select the “All” radio button under “Sites”.

•	Click the “OK” button to confirm and close the dialog.

Now the new rule (Deny All) will show up on the list of rules.

2) You have to apply the new rule (Deny All) to the user(s).

•	Select the new rule (Deny All).

•	Select the user(s) you want the rule to apply to.

3) You have to create a new rule to allow access to the specified one category (Computing).

•	Click on the “New...” button to open the “Edit Rule” dialog.

•	Select “Permit” under the rule type.

•	Specify a unique rule name on the “Rule Name” field such as “Permit Computing”.

•	Select the “Category” radio button under “Sites”.

•	Select a specific category (Computing) from the category list.

•	Click the “OK” button to confirm and close the dialog.

Now the new rule (Permit Computing) will show up on the list of rules.

4) You have to apply the new rule (Permit Computing) to the user(s).

•	Select the new rule (Permit Computing).

•	Select the user(s) you want the rule to apply to.  (Make sure you select the same users as in step 2.)

•	Click OK when done.

That’s it.  Now the selected users can only have access to the site categorized as Computing.

Note that if you want to allow a few more categories, repeat step 3 and 4 for each category.

See also

How To

Blocking Dialog

Site Category and Rating


How to change the rating on the categories?

1) Go to the Category Rating dialog.

•	Select “Rating...” under the menu “Tools”.  LittleBrother has the default rating on each category.

2) Change the rating on a specific category.

•	Select the category you want to change (ex, Music).

•	Select a new rating by clicking on one of the radio buttons such as “Productive”.

3) Repeat step 2 for more categories you want to change.

4) Click OK when done.

See also

How To

Site Category and Rating


How to show who is playing network games?

The Top Talker report can show who is playing network games.

1) Go to the Top Talker dialog.

•	Select “Top Talker...” under the menu “Reports”.

2) Specify you want to see only network games traffic.

•	Select “Specific Category” under “Traffic Type”.

•	Select the “Network Games” category in the list below.

3) Select the appropriate choices on the other fields.

•	Report Types

•	Group By

•	Date Range

•	Color By

4) Select “Exclude Intranet” if you want to see only Internet games.  Uncheck it if you want to see both Internet games and local network games.

5) Click OK.

A Top Talker report will be created to show who is playing games during a specific date range.

See also

How To

Report Dialog

Top Talker Report


How to check duplicate IP address?
How to check  for duplicate IP addresses?

You can use the “IP Table” report to check if there is any duplicate IP address.

1) Go to the IP Table dialog.

•	Select “IP Table” under the menu “Reports”.

2) Specify the specified range of date that you want to check.

3) Click OK.

4) An IP Address report will be created, it will be sorted by IP address.  You can find duplicate IP addresses by checking if the same IP address shows up more than one time.

See also

How To

IP Table Report


How can I know if someone is overusing the Internet?

You can setup an alert to notify you.

1) Go to the Options dialog.

•	Select “Option...” under the menu “Tools”.

2) Enable the alert on the user usage.

•	Select “User Usage” on the “List of Alerts”.

•	Check “Enable” under “Selected Alert Configuration”.

3) Specify how much is overused

•	Specify the number of hours to be considered overused in the “Threshold” field.

4) Click the “OK” button.

An alert will be generated for any user who is using the Internet over the specified threshold.  You can view the alert in the alert log by selecting “Alert” under the menu “Reports”.  You will also receive alert via email if you have enabled such option.

See also

How To

Alert

Alert and Log Report


How to select the specific user to track?

You can see the specific users by excluding all the unwanted users.

Go to the Tools->Groups option, then create a group or groups for all users you want to see in reports.

See also

How To

Group Configuration Dialog


How to view or modify user/computer properties

You can see or modify the specific user/computer properties through the User Properties Dialog.

See also

How to view or modify a specific Internet site property

How to change the category of the Internet site

How To


How to view or modify a specific Internet site property

You can see or modify the specific Internet site properties through the Site Properties Dialog.

See also

How to view or modify user/computer properties

How to change the category of the Internet site

How To


How to change the category of the Internet site

You can see and change the category of the Internet site through the Site Properties Dialog.

See also

How to view or modify user/computer properties

How to view or modify a specific Internet site property

How To


How to monitor network application?

LittleBrother can perform both Internet and Intranet application monitoring.  You can see the network application monitor by generating a Top Talker or Top Site report.  Make sure to select the “Application” in the “Color by” option in the report dialogs.

See also

How To

Network Application Monitor


How to support multiple network segments?

LittleBrother supports the Internet traffic for multiple segments and/or subnets.  To handle the multiple segments by one copy of LittleBrother, you have to install LittleBrother in the same segment where the Internet router resides.

The reason is that all the Internet traffic from your organization will eventually go through your Internet router, and therefore, that segment.  By placing LittleBrother in the segment where your Internet router resides, you will be able to see all the Internet traffic from your organization.

See also

How To

How to support multiple subnet?


How to support multiple subnets?

LittleBrother supports multiple subnets.  You can do that through the advance dialog in the IP Address Configuration.

Press the “Advance” button in the IP Address Configuration to bring up the dialog that configures multiple subnets.

See also

How To

How to support mulitple network segments?


How to change font?

You can change the default font for the main view and all reports through the Preferences Dialog.

See also

How To

How to view or modify user/computer properties

How to view or modify a specific Internet site property

How to change the category of the Internet site


How to resize the main view?

Following these steps to resize the width of the main view:

1.  Double-Click the main view border area

2.  Resize the main view window to the new width

3.  Double-Click the main view border area to restore to the left hand side

See also

How To


How to generate a report on users accessing restricted sites?

Blocked Users and Blocked Sites will show reports according to the blocking rules you have set.

See also

How To

Report Dialog


Troubleshooting

See also

Frequently Asked Questions (FAQ) for some of our answers.

We have a section How To that describes exactly how to use many features in LittleBrother.

LittleBrother reports failure to start driver

This occurs when the driver was not able to correctly link to the network driver.

First of all, be sure to restart your system after installing LittleBrother.   If you continue to have this problem, please follow the instructions below to allow us to look into the problem.

1) Open the system event viewer.

2) Select menu item "Log\System".

3) Select menu item "Log\Save As" to save the event log into a file.

4) Specify a unique file name for the event log file.

5) Email the saved event log file to Kansmen.

NT system reports “Cannot start Klbsrv.sys driver”

You may have an incompatible Network Interface Card in your computer.

Please follow the steps below to allow us to solve the problem:

a) Install the latest version of LittleBrother.

b) Restart your computer.

c) Bring up the event manager when you see “One or more services failed to start” from the NT System.

d) Open the event message and copy down the exact error text into a file.

e) Copy/write down the entire error message dialog from the LittleBrother application.

f) Run WinMSD.  (WinMSD is a utility from Microsoft that comes with every NT computer.)

g) Go to menu “File”, choose “Save Report”.

h) Select the following option:

“All Tabs” in Scope

“Detailed” in

“File” in

i) Save the report in a file.

j) Email us (LB@Kansmen.com) the file with all the error messages you copied/wrote down earlier.

Why can’t I see any traffic?

There can be several reasons.

1.  There really is no Internet traffic.  You should try to include all local network traffic (see below for detail instruction).

2.  Misconfigured IP address.  You should bring up the IP Configuration Dialog to ensure you have the correct IP address and subnet mask.

3.  Uncertified proxy server.  You may be using an uncertified proxy server.  Contact Kansmen Corporation for the updated list of certified proxy servers.

4.  Switching-HUB.  You may be using switching-hubs in your network.  In this case, you may have to talk to your network manager to ask him/her to reconfigure your switching-hub to allow other users’ computer traffic to pass by.  See below for more information.

5.   LittleBrother sometimes binds itself to another network adapter specified in your Network Properties window.  Here is what you can do to fix this:

•	RIGHT mouse click on "My Computer", select Properties.

•	Click on the tab "Device Manager".

•	(likely*) One of the devices will be visible as malfunctioning, with small red exclamation mark on top of it.

•	Remove this extra driver which has no associated device.

•	Reboot the computer.

* If the malfunctioning driver is not visible, open the "Network Adapters" item in the devices tree and check for duplicate drivers; only one driver should be listed if your computer has one network card.

To include all other local network traffic:

Press the Configure button to bring up the Configuration dialog.

Uncheck the “Exclude Intranet” checkbox.

Why can I only see my own computer traffic, not others?

If you have left LB running for a while (a few days) and still only see your own computer traffic, you are very likely running in a switching-hub environment.  In this case, you have to talk to your network manager to reconfigure your switching-hub to allow other computer traffic to pass by.

Why can’t I see a particular user?

First, you have to let LB run for enough time to detect most of your users in your network. LB will only display all the detected users.  LB can only detect those logged-in users who are using the network or Internet in the same network segment during the discovery period.  For those users who are not logged in to use the network/Internet, LB will not be able to know of such user’s existence.

Second, if the user is not in the same segment as yours, and LB is not configured to monitor traffic from that segment, and the other users' traffic from that segment does not run through your machine, LittleBrother will not see such a user.

Third, you may not be able to see all the users because of a license restriction; see below.

Note that a network segment is a physical boundary that separates network users into physical groups.

Why can't I see the full user name?

LittleBrother tries to identify users and machines in a format that is as easy to understand as possible. However, in some cases, LittleBrother is unable to determine the full user name or machine name, and uses the Internet address (IP) and/or Machine address (MAC) instead.

If you are running a NetWare network, we recommend that you use the Novell NetWare Client 32 on the machine that is running LittleBrother. This allows LittleBrother to query login information that is not supported by the Microsoft NetWare Client.

On Microsoft Networks, LittleBrother searches for the User and Machine names using NetBIOS and the Domain Name System (DNS). If LittleBrother cannot find the Machine name, it reports its address instead.

No blocking notification message sent to the user’s workstation

I can only receive the blocking message on some computers when I try to access the restricted site.  Why is that?

Depending on the OS environment of the computer, some computers always receive the message, some need to run an additional utility from the OS.

If the computer is running Windows NT 3.51/4.0 (both workstation and server), it should always receive the message.

If the computer is running Windows 95/3.1x:

  Case 1.   Without the Novell NetWare Client - You have to run winpopup to receive the message.

  Case 2.   With the Novell NetWare Client - Make sure to select the option in the NetWare Client configuration screen to allow the broadcast message to be displayed and run nwpopup.

We recommend putting winpopup or nwpopup into the startup group.

Winpopup is a Microsoft utility that comes with every Windows 95/3.1x.

nwpoup is a utility that comes with the Novell NetWare Client for Windows.

I get more than one copy of the blocking message

LittleBrother uses the Windows NT messenger service to send blocking messages. If you have more than one network protocol stack installed (e.g. IP and IPX), this service will automatically send a copy of the message with each protocol to make sure the recipient gets it.

Why my LittleBrother cannot block?

You may have an evaluation copy of the LittleBrother, or you only purchased the regular version of LittleBrother.  Blocking is only available for LittleBrother Pro.  You can call or email us to upgrade to LittleBrother Pro.

When I connect to a Web site, LittleBrother shows a connection to a local machine or company gateway instead

Check to see if you have a proxy server set up. LittleBrother detects the actual destination of the network traffic. When you use a proxy server, you are actually sending your request directly to the proxy server, and the proxy server gets any information it needs from the Web site.

We have a lot of users using Internet.  Why LittleBrother always shows only a limited (10/25/50 etc) user?

You may have more users in your network than your license on LittleBrother.  LittleBrother will only sum up to the number of licensed users.  To fix this problem, you can upgrade your license.

Why LittleBrother only shows a few users in the network and I have enough licenses for all my users?

On the main view of LittleBrother, by default, it is configured to show only active Internet users for the past hour.  For other users that are not using the Internet but may be using the Intranet (LAN), LittleBrother will not show them by default.  To see all active users in the network, you can reconfigure the main view option.

1) Click on the “Config” button on the main view.

2) Uncheck the “Exclude Intranet” option.

LittleBrother shows that I went to playboy.com for 10 minutes but I swear I only went there for a minute.  Why is that?

LittleBrother only estimates the time usage; it does not actually measure how long the connection took.  The reason is that the user can always spend more time reading the material than it actually takes to transmit them.  LittleBrother can only try its best to do an educated estimate.

LittleBrother reports that I went to 10 different sites and stayed there 10 minutes each in the last hour.  The math does not add up.  According to LittleBrother, there are 100 minutes in an hour.  Why is that?

See the answer from the last question.


Frequently Asked Questions - FAQ

FAQ provides general questions and answers related to what LittleBrother can and cannot do.

We have a section How To that describes exactly how to use many features in LittleBrother.

What does the Client/Server installation entail?

LittleBrother can either be run as a Client/Server option, or as a

standalone program for Windows95/98 or WindowsNT 3.51 users.

Client/Server requires that you install the LB server and/or client

portion of LB to a Windows NT4 machine, and clients can run either on

WindowsNT or Windows95/98.  The Standalone option allows Windows95/98 users

to use LittleBrother normally, allowing them to monitor and block

other machines.

How Does the Blocking by Keyword work?

Kansmen Corporation's Packet Cancelling Technology (PCT) allows LB to

look at either the URL or Domain Name for a user-defined keyword.

Typing in "Sex" in the keyword dialog of the blocking rule, for

example, allows you to block all sites with the word "Sex" in their

URL or domain.  Sites like "sexia.com" or "freesex.com" will be

blocked by LittleBrother, whether they are rated or not.

Can I see exactly what a user has downloaded in the past hour?

Using the Access Log report, you can view everything a user has

downloaded, from simple HTML text to images that were on a website.

Is LittleBrother's data exportable?

We have enabled the LittleBrother database so that it may be opened using Microsoft Access, or any other Access-compatible database.  Simply open the klbdbase.mdb file to create your own reports.

To see LittleBrother's reports in HTML format, simply use the

File->Export->HTML option.  This will work for table based reports.

Comma Separated Value(CSV) exporting is also available, for programs such as Excel.

What does LittleBrother require to track the Internet/Intranet traffic?

You need the following:

1) You have a Local Area Network (LAN) setup

2) Your Internet access is configured to go through the LAN

3) Your computer is connected to the LAN with a TCP/IP configuration

4) Your computer is running Windows 95 or Windows NT 3.51 or 40.

What is the requirement for LittleBrother to block the Internet traffic?

Same as above.

How can LittleBrother track Internet/Intranet traffic?

LittleBrother inspects all the traffic in the Local Area Network (LAN) and identifies/analyzes/reports those that are for Internet or Intranet.

How much disk space does LittleBrother require?

We require at least 30 MB of disk-space; 5 MB for the program, 25 MB for the first few months of data.  However, we recommend you to calculate the exact amount of disk-space you need depending on the size of your network and how long you plan to run it.

We estimated LittleBrother will generate about 100 Kilo bytes per node per month.

Which CPU does LittleBrother require?

It really depends on the combination of the size of your network, the traffic load, and number of applications concurrently running in the same computer.  Minimally we require a 486/66.  We generally recommend using a Pentium/133 or better.  For a larger size network, we recommend using faster CPU.

How can LittleBrother know whether the Internet access is productive or not?

LittleBrother comes with a database that categorizes the most popular Internet sites.  Each category is then rated whether it is productive, unproductive, or neutral.  By using this information and inspecting which site the Internet traffic is going, LittleBrother can determine whether the Internet traffic is productive.

Who determines the site category?

Kansmen has full time employees to go through Internet sites and determine their categories.

Can I change the Category rating?

Yes.  You can always change the rating on each category.

How to change the category of the Internet site

Can I get an update of the Category?

Yes.  The price of LittleBrother includes a full one-year free category update.  The register user can download the latest Category database from our Web.  Note that the price also includes one year free upgrade of the LittleBrother program should Kansmen has a newer version.

Some sites that I see are not categorized.  How do I add them in?

LittleBrother includes a site database that is constantly updated by full time employees.  However, you may still see that some sites are not categorized.  To do this, you need to turn LB off, and then run the Category Editor in the LittleBrother file.  Click on Add Site, and you are set.

Does the user know he/she is being blocked by LittleBrother?

Yes.  LittleBrother automatically sends a message that tells the user he/she is being blocked by LittleBrother.

I am not a network/Internet expert.  Can I still use LittleBrother?

Yes.  LittleBrother is designed for everyone, including non-technical users, from the beginning.  It is easy to use and understand.  Our engineers have gone through a series of reviews to make sure the normal user can use and understand LittleBrother.

Can LittleBrother track Internet access via a modem?

No.  Since the Internet traffic will directly go from the computer through the telephone wire and bypass the Local Area Network (LAN),  LittleBrother cannot track this traffic.  Again, LittleBrother can only track the traffic that is going through the LAN.

I want to restrict access to LittleBrother data. Can anyone view it?

LittleBrother allows you to have a password on its database.  Therefore, even though other people get a hold of your LittleBrother database (for example, from a backup tape), without knowing the password, they cannot use the database.

Will LittleBrother have trouble detecting users on a Switching-Hub network?

1.	Many makers of switching-hubs anticipated the need for monitoring and provided a VLAN port that shows all available traffic.

2.	Alternatively, some switching-hubs can be configured to disable switching on any given port and turn it into a VLAN port.

3.	If the hardware provides no monitoring aids, all Internet traffic can still be monitored by tapping into a connection between the Internet router and the hub.

On 10Base2 networks, this takes a T-connector.

On 10BaseT networks, one will need an  inexpensive 3-port hub.

LittleBrother is not showing the sites users are going to in the main user report.

LB comes configured in a way that speeds up reporting capabilities by not showing the top site for each user in the main user view.  However, you can change this by simply clicking on the "Configure" button at the bottom of the main report, and then checking the "Show Main Destination" box.  This will show the site a user was at, or which site the user stayed the longest, in the main user screen.  This is also configurable when you do a Top Talker or Top Sites report.

When I return in the morning, I don't see any users in the Main Report.  Why?

First of all, be sure that LittleBrother has been running for at least a few minutes in order for it to detect users on your network.  Sometimes, you may notice that users "drop off" after LB has been running for a while.   In reality, the main report shows the last hour's worth of information.  So, if no one's been using the Internet in the past hour, you are not going to see any information.

When I run a User Detail or Site Detail report, not all the information is there.

These reports run off of the last report generated, or if no report is available, it will run off of the main view.

Some users on my network are being displayed as sites.  Why is this?

If LittleBrother detects your computer connecting to other computers, even though they are on your network, it will register them as remote sites.  If this is occurring, you may need to configure LB to recognize different subnets within your network.  This can be done by going to the Tools->Network->Advanced dialog.

What are the approved TokenRing cards for LittleBrother?

LittleBrother has been verified to work with the following adapters/configurations:

•	Madge Smart 16/4 ISA PnP Ringnode

•	For Windows 95, you have to set the adapter for promiscuous mode

•	See topic Promiscuous mode on Madge Token Ring adapters

•	IBM Dual Auto LAN Streamer PCI(Windows NT 4.0)

•	Micro Channel (Windows NT4)

•	Proteon 1690 (Windows95)

IBM reports that promiscuous mode is supported on its PCI cards, but not on its ISA cards.

What is the extra dot for at the end of a user/site name?

If you change a user's or site's name, it will have a . at the end, to signify that it has been changed.

Why the total time spent does not agree in different reports?

It is because users can access many different Internet sites at the same time.

For example, John can do 5 different things in the Internet at the same time.  He brings up 5 copies of the Web browser to do the following:

1) Downdload the latest Web browser from www.Netscape.com

2) Downdload the latest Windows 95 patch from www.Microsoft.com

3) Downdload the latest stock quotes from www.StockQuote.com

4) Chat with a friend in UK (www.TheCompany.com.uk)

5) Check the latest news from www.CNN.com

And John spends 60 minutes on each single task.

The top talker report will show John spent a total of 60 minutes.

The user detail report will show John spent a combined total of 300 minutes (5 sites and each site John spent 60 minutes).

Both are correct.

John really only spent his 60 minutes doing all these tasks, and it shows in the top talker report.

However, if you look at the user detail report, he also did spend 60 minutes on each single site.  But in here, you cannot conclude that John spent a total of 300 minutes by adding time spent from each site.

Remember John can multitask.


Notes for different types of network hardware/configuration

Switching HUB

HUB with Channels

Multiple Subnets


Switching HUB

Switching hubs are sophisticated and expensive pieces of equipment that can improve performance of busy networks by isolating users from one another and reducing number of Ethernet collisions.

As a result, LittleBrother and other network monitoring tools will not have a complete picture of network activity unless one of the following workarounds is implemented:

1.	Many makers of switching-hubs anticipated the need for monitoring and provided a VLAN port that shows all available traffic.

2.	Alternatively, some switching-hubs can be configured to disable switching on any given port and turn it into a VLAN port.

3.	If the hardware provides no monitoring aids, all Internet traffic can still be monitored by tapping into a connection between the Internet router and the hub.

•	On 10Base2 networks, this takes a T-connector.

•	On 10BaseT networks, one will need an  inexpensive 3-port hub.


HUB with Channels

Several manufacturers (notably Cabletron) have produced hubs with configurable "channels" which allow administrators to restrict propagation of network traffic between channels (partial switching).

A workaround is to have the monitoring workstation plugged into the same channel as the Internet router, which can be achieved by simply re-plugging the network cable or reconfiguring the channels layout.


Multiple Segments/Subnets

LittleBrother can and will monitor multiple network segments and IP subnets, providing its network location is favorable for this monitoring.

How to support multiple network segments?

How to support multiple subnets?