finding network activity

[John Schmidt <jas@netbrick.com>]

Hi,

I have demand dialing turned on and would like to determine why ppp is 
starting up at 15 minute intervals.  I am looking at syslog and not 
seeing anything that would initiate outside traffic.  I also have 
tcpdump -i any turned on and not seeing anything either.  I removed 
ntpdate and exim, since earlier I was seeing exim in the syslog.  
However, with exim and ntpdate gone, something is still causing pppd to 
start up.  In addition, my web browser was on my home directory.  Just 
for testing sake, I don't have my web browser running now.  

Are there any other network monitoring tools that may tell me what is 
initiating tcp connections and forcing pppd to start up.  

Thanks,

John Schmidt