
This will give you historical insight into your network performance down to a per-port view. Programs like Nagios, SolarWinds Orion NMS, Microsoft System Center Operations Manager, and dozens of others can do this. If you want to monitor general network performance, you should use a network monitoring tool that can query your switch/router's metrics via SNMP. This is not something that you should leave running 24/7. If you periodically want to troubleshoot network issues, use port mirroring on your switch to duplicate the network port connected to the problematic device, you can then use wireshark to "listen in" on the traffic on that port.

This will prevent unauthorized devices from being connected to your network. If you don't want rogue users on your network, employ 802.1x authentication at the switchport. After reading your comments, there are a few different solutions you should employ.
