Security Incidents mailing list archives

Re: Odd identd behavior


From: Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>
Date: Wed, 16 Nov 2005 14:31:41 +0100

On 2005-11-14 kgp () nethere com wrote:
Just to reiterate, I'd simply dig or nslookup the ip addresses (or use
one of the many nslookup webpages) and see if they have some contact
info.

I'd suggest to use whois instead.

Really all you care about at this point is passing off some
information to the admin that it looks like he has some nefarious
activity on his network. You might also want to give him your ip
address (and maybe mac) so he can sift your info out of any forensics
he may do.

MAC address is irrelevant here, since it's only used on the ethernet
segment your box is connected to.

Regards
Ansgar Wiechers
-- 
"Another option [for defragmentation] is to back up your important files,
erase the hard disk, then reinstall Mac OS X and your backed up files."
--http://docs.info.apple.com/article.html?artnum=25668


Current thread: