>ntop is like top but for tcp connections.. as long as you don't get connected to a ``fake'' (*) ident server, that is. .mrg. (*) you should be capable of defining ``fake'' here.