So, I used firestarter that had logged blocked connections events with some useful details (but it is not being updated and I found somewhat unsafe as any moment we could click to deactivate the firewall..)
I would like to know if there is some way to do that with command line script? also to translate remote IPs into url names optionally?
or if there is some graphical application that helps on showing that!?
EDIT: there is conntrack-tools, but how to use it? it seems new kernel versions, new ubuntu releases, that wont work properly... I used to be able to track scanport attacks, now I have no clue...