In this paper, a lawyer office's network and internet traffic will be examined for determining the characteristics of users and network traffic load. In order to do that, some modifications on the lawyers office is made. Firstly, the switch which was previously used, replaced with a smart switch which can mirror traffic to a special port. Later, the office adsl modem is replaced with a modified Linux distribution. These linux device is used as a adsl modem/router for the network. This device also logged every incomming packet including the payload from it's both interfaces. After a months full run, the data gathered is collected and analized. (C) 2010 Published by Elsevier Ltd. Selection and/or peer-review under responsibility of the Guest Editor.