NBS

Marcus Ranum (of Network Flight Recorder fame) has released a tool
called "NBS"
(Never Been Seen) which is a small piece of code that watches for
out-of-the-ordinary traffic. He explains it better than I can here.