checking security logs
The lights on my cable modem indicate that I've had a bit of regular
traffic coming through today. I don't have anything running that should be
creating traffic from my side, so I'm pretty sure it is originating from
the outside. It doesn't appear that anyone is logging into or affecting my
Debian box (potato), but I'm not able to determine which logs to look at to
see what is going on.
What are the normal logs that will contain information about what packets
are received/sent through my system and what services were being requested?