Date: Wed, 03 Mar 2004 08:54:52 -0600 From: Eric Anderson <anderson@centtech.com> To: Francisco Reyes <lists@natserv.com> Cc: FreeBSD Security List <freebsd-security@freebsd.org> Subject: Re: How to monitoring activity on a card? Message-ID: <4045F1BC.5040006@centtech.com> In-Reply-To: <20040303094647.J93367@zoraida.natserv.net> References: <20040303094647.J93367@zoraida.natserv.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Francisco Reyes wrote: > My setup 4.9 stable with IPFW. Machine acts as gateway for two machines. > > What are my options on monitoring activity on my external card? > > This morning I noticed my DSL modem activity light is blinking non-stop. > Looking at /var/log/ don't see anything suspicious. > > I feel tempted to add "log" to all my ipfw pass rules, but wonder if there > isn't a better way. > > I am mostly concerned there is either some kind of attack going on or > somehow the machine was hacked and it's running something it's not > supposed to. I like trafshow for watching it "live". Eric -- ------------------------------------------------------------------ Eric Anderson Sr. Systems Administrator Centaur Technology Today is the tomorrow you worried about yesterday. ------------------------------------------------------------------
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4045F1BC.5040006>