Howto Find Out What Ip Is Using Traffic On Http And Smtp

[L33tLinuxN00b]

Please Help What do i type to find out what ip address is asking for access to the http and smtp ports...

[deek]

http traffic is picked up from your apache log. In slack, the default location is /var/log/apache/access_log. You should be able to find all that information in there for http.

As for smtp, I don't know for sure. Most all of your log files in slack will be uncer /var/log. There is a maillog file that might contain that information, so you will want to check there first. If that doesn't get you the right information, try some of the other log files in that directory...

[wfw]

if you want to watch the current connections to the apache server you should you /server-status feature. look for server-status in the apache config file to activate it.

if you want to watch previous connections search the access_log and error_log files

for smtp you should look into the maillog file or a program depending which mail server you use

[borromini]

Install ethereal and use that to monitor.