Packet Logging

[perfectly_dark]

I'm using Red Hat 7.3, default settings on all logging. I want to check all the packets that came in and out of the system. Is there a log that stores all this? If not, can I set one up? I want to know if that new worm tried to enter the system. Thx in advance

[tolstoy]

Run tcpdump and then direct all output to a file rather than have it log to the console. Check the man pages. I think they are pretty clear, which is not always the case for man pages.

[sharth]

ethereal as well.

[bastard23]

Also look into an IDS (Intrusion Detection system). Look at snort (http://www.snort.org/). Try googling for more IDS s.

Have fun,
chris