http://farm4.static.flickr.com/3305/4588110530_a60c934289_o.png This graph is munin collecting netstat -s output. I want to determine where the connections are coming from. There is nothing obvious in wireshare dumps. It's been a while since I've done anything fancy with iptables. How can I go about logging these? Thanks -s