I keep my port monitor running continuouslyIf you don't mind saying, which one do you use? Can it be configured to generate alerts when something weird happens?
I have a seperate machine running iptables that acts as the firewall/router. In the rules I state to log each packet that is dropped. Since I don't allow incoming stuff I don't want it logs those.