Great Circle Associates Firewalls
(April 1994)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: probe_tcp_ports
From: Dorian Deane <dorian @ cobalt . house . gov>
Date: Fri, 15 Apr 94 12:44:19 -0700
To: firewalls @ GreatCircle . COM

>
> You can get ntop, a kmem-based window connection viewer (shows
> listening ports and uid), or even udplog from TAMU's netlog package.
>
> Mike
>
>

How are these things better than netstat?  netstat also uses kmem,
so it should be just as hard/easy to hide a connection, I would
think.

dorian



Follow-Ups:
Indexed By Date Previous: Re: FTP services --
From: Wolfram Schmidt <wschmidt @ iao . fhg . de>
Next: Re: FTP services --
From: Ken Hardy <ken @ bridge . com>
Indexed By Thread Previous: Re: probe_tcp_ports
From: Mike Evans <mre @ primus . COM>
Next: Re: probe_tcp_ports
From: Mike Evans <mre @ primus . COM>

Google
 
Search Internet Search www.greatcircle.com