Monitoring ports

[Cary O'Brien]

In article <89u6bs$qrv$1 at bob.news.rcn.net>,
Z Three Penguin <z3penguin at z3penguin.com> wrote:
>Is there any way to monitor a port without having to open it.  I wanted to
>write a program to detect port scans and wanted to monitor the ports without
>having it look like every single port is open, which is what would happen if
>I opened all the ports with a socket.
>
>Any Ideas?
>

Startup tcpdump and read the output?  Tcpdump can do lots of filtering
for you.  For example *at this very moment* I am running tcpdump to
look for any wierdness on our external lan segment.   

-- cary