I have a machine acting as a tftp and telnet server. I'd like a way to monitor (in real time if possible) connections made to the two services. For example, when a tftp transfer is occurring, I'd like some visual indication that the transfer is taking place (showing the bytes transmitted would be great). As for telnet, seeing when a connection is made and terminated would be fine. Any ideas?

Please, no lectures on the insecurity of these two services. The box is behind a firewall and even if some internal malicious mad hacker decided to go postal on my server, I don't care. I'll make more!

BS

A simple command would be

tcpdump port 23 or port 69

Sure, I guess that's one way to do it. I was looking for something a bit more user friendly.

Thanks,
BS

Not exactly what you want, but if you have nothing else, you can try this :

create a script, called :listen.bin
%cat listen.bin
netstat -an | grep ESTABLISHED | grep :23
netstat -an | grep ESTABLISHED | grep :69
%

This script will tell you whether or not a telnet or tftp session is CURRENTLY present.

now, in crontab create an entry that calls this script every minute (or 10 secs, ...), If this script generates output, then write a time stamp to a logfile.

I agree that this method will not give you the number of transferred bytes. you will only have the timestamps when a telnet / tftp session was active.

for the number of transfered bytes i indeed think you need to play with the ouput of tcpdump.

Hope it helps you a little bit.