On Tue, 2004-06-08 at 10:24, Chadley Wilson wrote: > Hi ther fellow penguins, > > could some give me advise please, > > I would like to use a tool in the consol with an interface that allows > me to monitor connections throughout my intranet. It need to be able to > intercept telnet and rlogin connections and display output from those > connection. > What can I use that is secure? Put a box on a monitoring port of your switch. run tcpdump piped to grep for telnet or rlogin connections. connect to the machine via ssh. or run snort and only run rules that check what you want to check for. Use a.c.i.d for a pretty interface -Mike
