If you really want to look at incoming packets, tcpdump is a great tool you can use. Of course it can be tough to read so you can always get some open source stuff out there like Ethereal which runs in a X-Windows session. If you are using NAT internally it won't matter. Destination packets will still be going to your public ip. Netstat can give you interesting data on tcp/ip but if you want to capture source ip's and what they are doing then tcpdump will work. Snort is another tool you can use which will help you analyze traffic as well. -----Original Message----- From: plug-discuss-admin@lists.plug.phoenix.az.us [mailto:plug-discuss-admin@lists.plug.phoenix.az.us] On Behalf Of Michael Havens Sent: Monday, July 26, 2004 3:23 PM To: plug-discuss@lists.plug.phoenix.az.us Subject: reveal hackers I was studying my text book and was presented a question...... Which of the following can reveal hackers? The answer it says is netstat. After reviewing netstats man pages I have concluded that the reason for this answer is that it can reveal 'masquerade connections'. Unfortunately it seems that 'masquerade connections' has more to do with NAT than hackers. My google search turned up mainly the man page for netstat so I am thinking that there may be another thing netstat can do of which I am unaware. Maybe it has something to do with Windows' netstat. Who wants to clue me in? -- <:-)Mike(-:> This message has been scanned for viruses by the VEI Internet Automatic Email Spam and Virus Scanner, and is believed to be free of spam or viruses. Please report spam to spamtrap@vei.net. If you would like 98.9 % spam blocked from your E-mail then go to VEI Internet for details. Anti-spam/Anti-virus is FREE with every account. http://www.vei.net/ mailtospamtrap@vei.net --------------------------------------------------- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change you mail settings: http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss --------------------------------------------------- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change you mail settings: http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss