If you really want to look at incoming packets, tcpdump is a great tool
you can use. Of course it can be tough to read so you can always get
some open source stuff out there like Ethereal which runs in a X-Windows
session. If you are using NAT internally it won't matter. Destination
packets will still be going to your public ip. Netstat can give you
interesting data on tcp/ip but if you want to capture source ip's and
what they are doing then tcpdump will work. Snort is another tool you
can use which will help you analyze traffic as well.
-----Original Message-----
From:
plug-discuss-admin@lists.plug.phoenix.az.us
[
mailto:plug-discuss-admin@lists.plug.phoenix.az.us] On Behalf Of
Michael Havens
Sent: Monday, July 26, 2004 3:23 PM
To:
plug-discuss@lists.plug.phoenix.az.us
Subject: reveal hackers
I was studying my text book and was presented a question...... Which of
the
following can reveal hackers? The answer it says is netstat. After
reviewing
netstats man pages I have concluded that the reason for this answer is
that
it can reveal 'masquerade connections'. Unfortunately it seems that
'masquerade connections' has more to do with NAT than hackers. My google
search turned up mainly the man page for netstat so I am thinking that
there
may be another thing netstat can do of which I am unaware. Maybe it has
something to do with Windows' netstat. Who wants to clue me in?
--
<:-)Mike(-:>
This message has been scanned for viruses by the VEI Internet
Automatic Email Spam and Virus Scanner, and is believed to be free of
spam or viruses.
Please report spam to
spamtrap@vei.net. If you would like 98.9 % spam
blocked from your
E-mail then go to VEI Internet for details. Anti-spam/Anti-virus is FREE
with every account.
http://www.vei.net/
mailtospamtrap@vei.net
---------------------------------------------------
PLUG-discuss mailing list -
PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
---------------------------------------------------
PLUG-discuss mailing list -
PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
(text/plain)