Security Incidents mailing list archives

traffic logging

From: jburdge () AVENTAIL COM (Jon Burdge)
Date: Wed, 26 Apr 2000 10:41:40 -0700


I've been seeing a lot of odd traffic on several of my machines and I was
wondering what you folks suggest for logging traffic on a single machine.
Several of the machines are Linux boxes, and I'd like the ability to log in
depth.  Things I'd like to capture would include things like stealth scans
and odd packets.

Any suggestions?

Current thread:

Odd Firewall Entries Vincent Sweeney (Apr 20)
- Re: Odd Firewall Entries Jens Hektor (Apr 21)
  - Re: Odd Firewall Entries Vincent Sweeney (Apr 24)
- <Possible follow-ups>
- Re: Odd Firewall Entries Ed Padin (Apr 24)
  - Linuxconf probe Thomas Chiverton (Apr 26)
  - Re: Odd Firewall Entries Eric Vyncke (Apr 26)
  - traffic logging Jon Burdge (Apr 26)
    - Re: traffic logging Lance Spitzner (Apr 27)
  - Re: Odd Firewall Entries Robert Graham (Apr 26)
- Re: Odd Firewall Entries Ed Padin (Apr 27)