tcpdump & process information

[Edward]

Ilias Sachpazidis пишет:
> Hi, try ettercap. < http://ettercap.sourceforge.net/>
>
> -IS
>
> ---------------------------------------------------
> Fraunhofer IGD
> Department Cognitive Computing & Medical Imaging
>
> Ilias Sachpazidis  phone:+49/(0)/6151/155 507
> Fraunhoferstr. 5   fax  :+49/(0)/6151/155 480
> D-64283 Darmstadt  Ilias.Sachpazidis at igd.fhg.de
> Germany           http://www.igd.fhg.de/~isachpaz
> ---------------------------------------------------
>
> -----Original Message-----
> From: owner-freebsd-questions at freebsd.org
> [mailto:owner-freebsd-questions at freebsd.org] On Behalf Of Edward
> Sent: Dienstag, 28. August 2007 14:02
> To: freebsd-questions at freebsd.org
> Subject: tcpdump & process information
>
> Hi there!
>
> Is there an utility which can work as usual tcpdump but with process 
> information option?
> (or something like continually running `sockstat -46` or `fstat | grep 
> internet` or `lsof -i4 -i6` ...etc)
> i.e. i wanna see which process generate network traffic to trace out 
> some suspicious activity.
> it would be great if this program will be might to log all what it`ll 
> capture.
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
>   
i saw it`s dependencies list...... 
http://www.freebsd.org/cgi/ports.cgi?query=ettercap&stype=all
it requires X and so on :( threfore it`s impossible to run it on the 
most of servers.