# Monitoring Incoming TCP Connections

This section illustrates how to monitor incoming TCP connections. This task is useful in identifying any unauthorized, suspicious, or otherwise unwanted network access requests in real time.

## tcp_connections.stp

While tcpconnections is running, it will print out the following information about any incoming TCP connections accepted by the system in real time:

- Current `UID`

- `CMD` - the command accepting the connection

- `PID` of the command

- Port used by the connection

- IP address from which the TCP connection originated

## tcpconnections Sample Output

    UID            CMD    PID   PORT        IP_SOURCE
    0             sshd   3165     22      10.64.0.227
    0             sshd   3165     22      10.64.0.227