If anyone has ever used a watchguard branded appliance. They have a very nice color coded scrolling screen of all active connections. These can be filtered to elimate what you don't want to see. This makes watching active connections easier to diagnose without first having to do a capture then open in wireshark. Their is always always the CLI to diagnose and see all active connections but there isn't a way to color code it. Just tossing it out there as a nice useful tool used when diagnosing issues.