howto log/monitor port-access?

overlord73 · 04-19-2005, 06:02 AM

hi all,

since a few days vnstat shows curious high traffic on my NIC. alway at the sime time (vnstat -h).
for example:
18.04. 166.34 MB | 17,592,186,042,732 MB | 17,592,186,042,898 MB

any easy ideas how to log or monitor port access for a defined time period?

till now I could not determine any ominous programms....!

celejar · 04-19-2005, 09:58 AM

Sniffers like Ethereal or tcpdump can monitor and capture traffic and even help you decipher it, although I don't think they'll identify the program transmitting.

pAn1k · 04-20-2005, 11:22 PM

Well, how I monitor specific port acces is through a terminal on my desktop with tail -f /var/messages | grep <whatever>. Works great, I usually have three transparent Eterms open showing whats going down. Have fun.