Detecting Connections

I have Ubuntu Linux. I turned on the System Monitor applet on my Gnome
Panel. While doing absolutely nothing on my PC but with Bluefish and my
web app open (the web app I'm writing), I noticed my network chart hop
on a steady beat, 100%, 0%, 100%, 0%, etc. If I do
'/etc/init.d/networking stop; /etc/init.d/networking start', the
problem goes away until the next day. I haven't noticed a consistent
time when this occurs -- haven't looked at it long enough.

Is there a way I can take a stopped network card and try to record
which process is trying to connect?

Is there a command I can type at the moment I see the spikes and
determine which process is doing this?

-OR-

Is there an iptables output-based rule I can add that tries to capture
this?

You could install the ethereal package and capture packets when you see
the abnormal activity. By looking at those packets you will have an
idea what is causing this.

Hope this helps.


Alfred wrote:
> I have Ubuntu Linux. I turned on the System Monitor applet on my Gnome
> Panel. While doing absolutely nothing on my PC but with Bluefish and my
> web app open (the web app I'm writing), I noticed my network chart hop
> on a steady beat, 100%, 0%, 100%, 0%, etc. If I do
> '/etc/init.d/networking stop; /etc/init.d/networking start', the
> problem goes away until the next day. I haven't noticed a consistent
> time when this occurs -- haven't looked at it long enough.
>
> Is there a way I can take a stopped network card and try to record
> which process is trying to connect?
>
> Is there a command I can type at the moment I see the spikes and
> determine which process is doing this?
>
> -OR-
>
> Is there an iptables output-based rule I can add that tries to capture
> this?