> Well, tcpdump has a different goal. ippl (linux) logs every connection
> attempt udp/tcp (syn) to syslog. This makes it possible for me to see if
> someone scanned my box, how many connections to service xy were initiated.
> very useful. i'm looking for a tool which does the same for netbsd. does
> anyone know one?

How about 'ipf' and 'ipmon'?  See the respective man pages.

David S.