I have been working on a conky configuration to help me manage penetration tests, but after much research, I cannot find anyone else speaking of their configs in any way other than the glitz.
Currently, I have:
- CPU load
- Memory load
- top processes
- networking summary
- dashboard of pre-selected running services (ftp, tftp, www, p0f, wireshark, ettercap)
What I really want is to monitor all incoming connections, but localhost keeps getting in the way (metasploit connecting to postgres, msfrpcd, etc). Does anyone know how to filter out localhost from tcp_monitor?
Does anyone have a custom conky config for pentesting or know of a source for ideas?
I have tried an if_match against the "remote ip" and "addr(lo)", but it throws errors with IPv6.