On Thu, 2010-02-18 at 13:47 -0800, Rick Stevens wrote:
On 02/18/2010 09:52 AM, Wendell Nichols wrote:
> I would like to monitor network connections on my servers. Users run
> all sorts of stuff and I want to know when some chat client starts
> shipping data to a system in china etc.
Snort is probably the best (and complicated) network sniffer out
there. It can do some serious analysis. It also eats up CPU cycles
like crazy. You've been warned.
Other things to look at: ntop and wireshark (not for the faint of
heart).
poc