On Feb 5, 2008, at 12:15 PM, John R Pierce wrote: > Tony Schreiner wrote: >> Is there a way to log outbound connections to a specific port (80)? >> CentOS 4.6. > > > assuming you want to log user web browsing traffic, configuring a > Squid transparent proxy at your network border would be the best > way. its logfiles are quite similar to those of a webserver, so > you can use a wide range of log analysis tools. > To get more specific about what's going on. My network services have informed me that the machine is probing other systems at a high rate. An infection of some sort. And I'm trying to track down what's going on. Tony