In my Debian Lenny setup I have a launcher in a panel for tcptrack with sudo powers.  This lets me click quickly and see what's connected or trying to connect.  Keeping the -r value fairly high lets me catch the quick connection attempts (which I seem to get a lot of from China?).

 [code]

gksu "x-terminal-emulator -e tcptrack -i eth0 -r 10"

[/code]