-----BEGIN PGP SIGNED MESSAGE-----
odd.. any specific hostnames the traffic is coming from? this could be
responses to spoofed packets, with your address as the spoofed source.
Thank You,
Ben Kochie (ben at nerp.net)
"Unix is user friendly, Its just picky about its friends."
On Sun, 3 Jun 2001, Dave Sherohman wrote:
> The last week or so, one of my machines has been logging a lot of ICMP
> destination unreachables from a VA Linux address. But I have no idea why it
> would be talking to VA at all.
>
> I've set up an ngrep session to log all traffic to and from 198.186.200.0/22,
> which is the block containing the address sending me the dest unreachables,
> but is there a better way to find out why this box keeps talking to them?
> (And no, it's not offering any services other than ssh, so VA shouldn't be
> the ones initiating the connections. Nor was it bought from them or ever had
> anything to do with the company aside from maybe viewing their website once
> or twice.)
>
> --
> That's not gibberish... It's Linux. - Byers, The Lone Gunmen
> Geek Code 3.12: GCS d? s+: a C++ UL++++$ P++>+++ L+++>++++ E- W--(++) N+
> o+ !K w--- O M- V? PS+ PE Y+ PGP t 5++ X+ R++ tv+ b+ DI++++ D G e* h r y+
> _______________________________________________
> tclug-list mailing list
> tclug-list at mn-linux.org
> https://mailman.mn-linux.org/mailman/listinfo/tclug-list
>
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv
iQCVAwUBOxpt/ctpDhsSpvgtAQGqMgP9FmB2IrN/REwbNmtwJlH+Sa+x6Pwv+LOA
mMm5S9yRWWdYn8omwwq7U+JWEbWQxK+kcCjwZx1yTVOC/tFAWtfcJ77sYh49NIvN
gnQlYyiYmNe+dETIit8/SewOo10btGg2CXLxOtKvTQ5ltWCY4lTFtqdnbkwAeS06
x+wIam53nI8=
=B/bY
-----END PGP SIGNATURE-----