[geeks] ipf/ipmon how-tos/guides

[velociraptor]

OK, calling on the collective bookmarks of all you 
security geeks out there. :-)

Any recommended URLs for reading up on deciphering 
ipf rules and/or ipf/ipmon logs?

I am trying to decipher what I think is a slow probe of our 
web servers, but I didn't write the rules and haven't had that 
much experience reading ipf/ipmon logs, so am looking for 
some good guides.

Google is coming up with large numbers of hits...but there is 
sorting the wheat from the chaff problem.

TIA--
=Nadine=