On 02/18/2010 03:01 PM, Patrick O'Callaghan wrote:
On Thu, 2010-02-18 at 13:47 -0800, Rick Stevens wrote:
> On 02/18/2010 09:52 AM, Wendell Nichols wrote:
>> I would like to monitor network connections on my servers. Users run
>> all sorts of stuff and I want to know when some chat client starts
>> shipping data to a system in china etc.
>
> Snort is probably the best (and complicated) network sniffer out
> there. It can do some serious analysis. It also eats up CPU cycles
> like crazy. You've been warned.
Other things to look at: ntop and wireshark (not for the faint of
heart).
Wireshark, of course, being the GUI side of tcpdump. But you knew that!
----------------------------------------------------------------------
- Rick Stevens, Systems Engineer ricks(a)nerd.com -
- AIM/Skype: therps2 ICQ: 22643734 Yahoo: origrps2 -
- -
- "Doctor! My brain hurts!" "It will have to come out!"
-
----------------------------------------------------------------------