While I favor developing tools that can monitor
promiscuously for certain traffic patterns
that may be "out of the ordinary", there is an easier
solution in this particular (SATAN) case.
Just look at your syslogs. If you have even moderate
logging enabled, you should see the attempts quite
> > I have found the SATAN Detector, Gabriel - But I read about another
> > "SATAN Detector" called Courtney, developed by Lawrence Livermore
> > Laboratories. Does anyone know what the latest version is and where
> > it can be found?
> > Thanks.
> courtney can be gotten at ciac.llnl.gov..
> gabriel can be gotten from ftp.lat.com...