Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 4 Mar 2004 14:08:15 -0300 (ART)
From:      Fernando Gleiser <fgleiser@cactus.fi.uba.ar>
To:        Francisco Reyes <lists@natserv.com>
Cc:        FreeBSD Questions List <questions@freebsd.org>
Subject:   Re: Monitoring TCP/IP traffic
Message-ID:  <20040304140617.T26149-100000@cactus.fi.uba.ar>
In-Reply-To: <20040304114040.T11547@zoraida.natserv.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 4 Mar 2004, Francisco Reyes wrote:

>
> Is there is anything like TOP for TCP/IP?

yes, ntop :)

> I saw ntop in ports, but it seems only analyzes LAN/internal subnet.

You need to tweak its configuration t make it listen on the tun0 interface.

Take a look at ngrep too. and snort fr logging suspicious activity.


		Fer



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040304140617.T26149-100000>