Re: how to trace port openning
I thought about it too, but I expected something more specialized.
The next question is certainly how to grep it ?
ngrep?
Package: ngrep
State: installed
Automatically installed: no
Version: 1.45.ds2-2
Priority: optional
Section: net
Maintainer: Romain Francoise <rfrancoise@debian.org>
Uncompressed Size: 57.3k
Depends: libc6 (>= 2.7-1), libnet1 (>= 1.1.2-1), libpcap0.8 (>= 0.9.3-1),
libpcre3 (>= 7.4)
Description: grep for network traffic
ngrep strives to provide most of GNU grep's common features, applying
them to
the network layer. ngrep is a pcap-aware tool that will allow you to
specify
extended regular expressions to match against data payloads of
packets. It
currently recognizes TCP, UDP and ICMP across Ethernet, PPP, SLIP and null
interfaces, and understands bpf filter logic in the same fashion as
more common
packet sniffing tools, such as tcpdump and snoop.
Homepage: http://ngrep.sf.net/
Reply to: