You may want to look into PSAD. I've used it on many boxes and it's kind of fun watching it do its magic.
http://www.cipherdyne.org/psad/ /* PLUG: http://plug.org, #utah on irc.freenode.net Unsubscribe: http://plug.org/mailman/options/plug Don't fear the penguin. */
