
netwatch - A real time network security monitor
Copyright (C) 1993 Douglas Lee Schales, David K. Hess, David R. Safford

Please see the file COPYING.

Netwatch is a package for monitoring TCP and UDP packets on an
ethernet segment and reporting unusual activity.  This is done by
monitoring specific services such as telnet or ftp.  It is intended
for monitoring an Internet link, but can be used to monitor internal
links, though this will most likely result in voluminous amounts of
log entries.  The man page describes the services currently monitored.

Typical usage:

netwatch -u +telnet +ftp smtp login shell >> logfile&

Note: the 'telnet' and 'ftp' modules are not available via the
anonymous FTP distribution.  They must be requested in
writing.

