On Feb 5, 2008, at 12:15 PM, John R Pierce wrote:
Tony Schreiner wrote:
Is there a way to log outbound connections to a specific port (80)?
CentOS 4.6.
assuming you want to log user web browsing traffic, configuring a
Squid transparent proxy at your network border would be the best
way. its logfiles are quite similar to those of a webserver, so
you can use a wide range of log analysis tools.
To get more specific about what's going on. My network services have
informed me that the machine is probing other systems at a high rate.
An infection of some sort. And I'm trying to track down what's going on.
Tony
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos
