Firewall Wizards mailing list archives

Re: Scans Observed by Officer Friendly


From: David Lang <dlang () diginsite com>
Date: Tue, 18 May 1999 15:47:49 -0700 (PDT)

-----BEGIN PGP SIGNED MESSAGE-----

Depending on how they have the addresses assigned, it may be a permanent
assignment, but that still doesn't tell you if it was that person or if
their machine was hijacked,

David Lang

 On Tue, 18 May 1999, chuck wrote:

Date: Tue, 18 May 1999 09:58:57 -0700
From: chuck <fwwiz () yerkes com>
To: Randy Grimshaw <rgrimsha () mailbox syr edu>, firewall-wizards () nfr net
Subject: Re: Scans Observed by Officer Friendly

So how open is TimeWarner going to be to figuring out who had that
address at the time that you (don't) note and going out and smacking
someone upside the head? 

Quoting Randy Grimshaw (rgrimsha () mailbox syr edu):

Where would the address 24.93.46.49 be comming from?

Is this an annoyance or a masqerade?

My 'Officer' noticed BO_PING sweep and BO_FILEFIND attempts on Friday
night and Sunday night.


<><Randall Grimshaw, Network Programmer, Syracuse University, 315-443-5779



"If users are made to understand that the system administrator's job is to
make computers run, and not to make them happy, they can, in fact, be made
happy most of the time. If users are allowed to believe that the system
administrator's job is to make them happy, they can, in fact, never be made
happy." 
- -Paul Evans (as quoted by Barb Dijker in "Managing Support Staff", LISA '97)

-----BEGIN PGP SIGNATURE-----
Version: PGP for Personal Privacy 5.0
Charset: noconv

iQEVAwUBN0HuFz7msCGEppcbAQHY7AgAmvtJOyY859TlD/Zyu5RPX3xVrqRez/Hj
sAOX3h2eXKSBrP5lmjEsv0VO9rlI6nY51dZyadTB9aL5dXeufWqEADByXMhgX12v
TSirzj98PvKV2ZVP3ItrJH/0XJEIEMBhJ1S/+WT1Dfl35W8yGvAyS9BMjtSC87jn
F6NCpcj1StHP1Kqe0m2MUw5cCPn9ebKUthddT3dCRnJ8xPHuFsZaznTLVjCqSZmI
qTNaG0UXIDHOaqGwYF7SCyVAryATcIwi0t+BED33s6vyCqAJbUXlE5ndYzqWwzAg
ntfemKpNJoxzoU53zaK1ub7/fMkEzLvq5azQ+y8G0mQfr3ghNGdayw==
=XI9e
-----END PGP SIGNATURE-----



Current thread: