Try ippl. It logs connection attempts. logcheck is a tool that scans your log files every hour and mails you the results. It's noisy to start with, but you can add events to your logcheck.ignore file to cut down on the false alarms for routine traffic.
Willy Lee wrote: > How can I tell when I am being portscanned? Is there an appropriate > selection of Debian packages for this? -- Michael J. Smith [EMAIL PROTECTED] 2250 Patterson #25 Eugene, OR 97405 (541)346-7562
