From owner-freebsd-questions  Thu Sep  5 10:30:30 1996
Return-Path: owner-questions
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.5/8.7.3) id KAA04253
          for questions-outgoing; Thu, 5 Sep 1996 10:30:30 -0700 (PDT)
Received: from who.cdrom.com (who.cdrom.com [204.216.27.3])
          by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id KAA04217
          for <questions@freebsd.org>; Thu, 5 Sep 1996 10:30:25 -0700 (PDT)
Received: from post.vale.com (post.vale.com [204.117.217.66])
          by who.cdrom.com (8.7.5/8.6.11) with SMTP id JAA19391
          for <questions@freebsd.org>; Thu, 5 Sep 1996 09:03:29 -0700 (PDT)
Received: from jaguar.vale.com by post.vale.com id aa11512; 5 Sep 96 11:02 CDT
Received: by jaguar with Microsoft Mail
	id <01BB9B1A.D42D3C90@jaguar>; Thu, 5 Sep 1996 11:10:21 -0500
Message-ID: <01BB9B1A.D42D3C90@jaguar>
From: Hal Snyder <hal@post.vale.com>
To: "'Christoph Kukulies'" <kuku@gilberto.physik.rwth-aachen.de>
Cc: "'questions@freebsd.org'" <questions@freebsd.org>
Subject: RE: catching a ping 
Date: Thu, 5 Sep 1996 11:10:20 -0500
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: owner-questions@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

Christoph Kukulies wrote:
> Is there a way to test if some host is pinging me in intervals?
> I tried systat -netstat and did a ping -c 1 <host> and the
> connection didn't show up (would port 7 be used in that case)

Enable bpf in your kernel and use tcpdump, something like
  tcpdump icmp[0] = 8 or icmp[0] = 0

For syslogging, you could enable IPFIREWALL and use the likes of
  ipfw add accept log icmp from any to ${my_ip} icmptypes 0,8