On Thu, 4 Mar 2004, Francisco Reyes wrote: > > Is there is anything like TOP for TCP/IP? yes, ntop :) > I saw ntop in ports, but it seems only analyzes LAN/internal subnet. You need to tweak its configuration t make it listen on the tun0 interface. Take a look at ngrep too. and snort fr logging suspicious activity. Fer