
Very nice tool I just found. Going to be very handy next week during SANS CDI East.
TCPTrack passively watches all connections to an ethernet interface and lists them. Simple, to the point, useful. Linux and BSD, author needs access to a Solaris machine to get it working on Solaris.
Recommended. JaBbA says check it out.