Article Figure 1 Figure 2 Figure 3 Figure 4 apr2004.tar

Figure 4 Sample psad --Status output

#  psad --Status
 .. psadwatchd (pid: 12034)  %CPU: 0.0  %MEM: 0.0
    Running since: Sun Dec  7 20:11:23 2003

 .. kmsgsd (pid: 12032)  %CPU: 0.0  %MEM: 0.0
    Running since: Sun Dec  7 20:11:23 2003

 .. psad (pid: 12030)  %CPU: 0.0  %MEM: 0.8
    Running since: Sun Dec  7 20:11:23 2003
    Command line arguments: [none specified]
    Alert email address(es): mbr@cipherdyne.org

    Global packet counters:
        tcp:  38
        udp:  5
        icmp: 14

src:          dst:          chain:  interface:  tcp:  udp:  icmp: dl:
163.252.x.x   68.49.x.x     input   eth0        0     0     2     2
205.186.x.x   68.49.x.x     input   eth0        0     0     4     2
63.72.x.x     68.49.x.x     input   eth0        0     0     8     2