Re: [tlug] Real-time Port Analyzer?

[Ramil Sagum <ramil@example.com>]

Mark Sargent wrote:
> yes, but, Ethereal has no way of distinguishing the process that is 
> generating the packets. I believe someone, back in 2001(?) was playing 
> with some code, that would enable it to do so, for Linux, but, nothing 
> seemed to come of it. I've got an established conversation,
> 
> tcp        0      0 192.168.0.15:32995          
> 062016145088.customer:62757 ESTABLISHED
> 
> and Ethereal is certainly showing ongoing packet exchange, but, I can't 
> tell exactly, what it is.

How about using iptables? You can make a match extension using the owner module.

iptables --append OUTPUT -m owner --pid-owner $SKYPE_PID --jump LOG --log-level 
DEBUG --log-prefix "Skype is sending something!!! : "

(haven't actually tested this yet.)


regards
--moogs