using ethereal

Used ethereal on saispace to check out the mysterious packet bursts from dharma when it boots up. Filters were useful: capture filter

(host not 192.168.2.6) and (host not our-melb-ipaddress )

since a sftp session was in progress.
Display filter would be

ip.addr ne 192.168.2.6

and so on.

Nothing suspicious. Only NTP, multicast router solicitation and antivirus updates.

Linuxjournal has a nice guided tour of ethereal.