How to monitor port probes on port 80

[Greg Roberts]

Is there an easy way to monitor port 80 activity on hp 10.2 or 11. Looks like our internal network is ineffected with the new windoz virus.
Thanks
Greg

[Santosh Nair_1]

How about using snort, it does this a a whole lot more. Also look into nmap.

http://www.snort.org
http://www.nmap.org
-Santosh

[linuxfan]

Hi Greg,

Are you looking at IDS systems?

HP has IDS/9000
http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=J5083AA

You can also look at http://www.snort.org

You can also look at portsentry
http://psionic.com/abacus/portsentry

You can use nmap to check the open ports on your system
http://www.nmap.org

-HTH
Ramesh

[Michael Tully]

Hi,

Other than 'nmap' which has been suggested
http://www.nmap.org

there is a couple of others that I found
useful and that was 'ngrep' and 'dsniff'
http://www.packetfactory.net/Projects/ngrep/
and
www.monkey.org/dugsong/dsniff

HTH
-Michael

[John Bolene]

You can install apache web server and just use it for the activity logs that it creates.

[James Beamish-White]

Try using klaxon, from http://www.eng.auburn.edu/users/doug/second.html. I haven't used it in HPUX yet, but it should work.