How to tell if IPF is running?

[Peter N. M. Hansteen]

"jdow" <jdow at earthlink.net> writes:

> Which tool would be able to do this sort of thing best and how might it
> have been done.

PF has most of the bits you need built in, see eg
http://www.bgnett.no/~peter/pf/en/bruteforce.html (part of a PF
tutorial).  

For weeding out old table entries, you might want to look at
the expiretable utility (http://expiretable.fnord.se/).

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://www.blug.linux.no/rfc1149/ http://www.datadok.no/ http://www.nuug.no/
"First, we kill all the spammers" The Usenet Bard, "Twice-forwarded tales"