Re: Rogue FTP Servers

["Schmidt, Eric W" <erschmid () IUPUI EDU>]

You might look for an transfer log file as well.  It may identify other locations inside and outsude your network 
involved in the ftp file transfers you're sure to have.  I found one in one of our compromised workstations that had 22 
different outside networks included in the BotNet.

Eric W. Schmidt, CISSP, CISM
Chief Security Officer
IU School of Medicine

Eric W. Schmidt
--------------------------
Sent from my BlackBerry Wireless Handheld


-----Original Message-----
From: The EDUCAUSE Security Discussion Group Listserv 
**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.