Hello:

I've got a little question here.

I came home today and noticed the router is showing traffic from my Mandriva 2006 machine. I run the "who" command to see if anyone is logged in and I don't find anyone logged in. The network monitoring shows about 1.5KB/s transmit and .5KB recieve.

I'm curious how to find out what this traffic is on the system. Is there a way to monitor the incoming / outgoing packets and their contents? Or to get a more verbose listing of anyone that is in the computer? I'm not running anything that should be accessing the internet, so I am at a little bit of a loss.

Thanks for the help.

~Nem

You should be able to use Ethereal. I am not sure about Mandriva but Fedora comes with it. If you don't have it installed, I am sure that you would be able to google for it and get it. You would be able to track traffic on a packet basis and actually watch the traffic. Hope this will lend some insight!

Also, a minor amount of traffic is generated by hardware handshaking.

Just as a quick check, you can run "netstat -anp" to get a list of open connections, and the PIDs responsible for those connections. It won't show you the contents of the packets, but it might save you the trouble of analysing expected traffic.