Jukka Marin <jmarin@pyy.jmp.fi> writes:

> Sorry if this is not the place for questions like this, but..
> 
> Is there a program to monitor network usage by IP address and/or port?
> Something like tcpdump with no packet output but only counters for
> different packet types and port numbers.. and maybe a list of top 100
> IP addresses and their relative byte counts?
> 
> I guess tcpdump could be modified to gather statistics like this, but
> if there _is_ such a program already....

I'm writing a custom monitor like this.  My intent is to watch for SYN
attacks as well, while I'm at it.

If you want a snapshot and want to help out, let me know.  :)

--Michael