From owner-freebsd-questions Sun Sep 30 6:45:32 2001 Delivered-To: freebsd-questions@freebsd.org Received: from topaz.mdcc.cx (topaz.mdcc.cx [212.204.230.141]) by hub.freebsd.org (Postfix) with ESMTP id 91C6737B40C for ; Sun, 30 Sep 2001 06:45:29 -0700 (PDT) Received: from k7.mavetju.org (topaz.mdcc.cx [212.204.230.141]) by topaz.mdcc.cx (Postfix) with ESMTP id E64952B71E; Sun, 30 Sep 2001 15:45:26 +0200 (CEST) Received: by k7.mavetju.org (Postfix, from userid 1001) id 1546B2E3; Sun, 30 Sep 2001 23:45:23 +1000 (EST) Date: Sun, 30 Sep 2001 23:45:22 +1000 From: Edwin Groothuis To: BSD Freak Cc: FreeBSD Questions Subject: Re: Network auditing tool Message-ID: <20010930234521.G482@k7.mavetju.org> Mail-Followup-To: Edwin Groothuis , BSD Freak , FreeBSD Questions References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from bsd-freak@mbox.com.au on Sun, Sep 30, 2001 at 11:34:36PM +1000 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Sun, Sep 30, 2001 at 11:34:36PM +1000, BSD Freak wrote: > I need somekind of network auditing tool that will run the interface in > promiscuous mode and sniff the network and give a summary of what's > been going on. This tool should run at the application level rather > than at the IP level. I need output similar to the following: It's not what you're looking for, but trafshow (it's in the ports) gives a nice realtime overview of your open TCP sessions (and also the UDP packets floating around) Edwin -- Edwin Groothuis | Personal website: http://www.MavEtJu.org edwin@mavetju.org | Interested in MUDs? Visit Fatal Dimensions: ------------------+ http://www.FatalDimensions.org/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message