Is there any way to find out which application on a server is responsible for incoming traffic?
I have a debian linux server that has a lot of incoming traffic and would like to know if someone managed to hack his way into it or if there's a faulty web-application (apache2 + PHP) and I just have to fix a bug.
Any suggestions? Applications I need to know about? "Long Time Network Monitors"?