nanog mailing list archives
Re: Exodus / Clue problems
From: TTSG <ttsg () ttsg com>
Date: Sun, 15 Nov 1998 21:41:28 -0500 (EST)
On Sun, Nov 15, 1998 at 06:24:13PM -0500, sigma () pair com wrote:Let me guess - the IP is 209.67.50.254, and they're trying to login to nameservers as "root", sometimes a dozen times per second?Not seeing that rate, but yep: Nov 15 18:10:25 mailhost.cmc.net ipmon[117]: 18:10:24.956040 le0 @35 b 209.67.50.254,1608 -> mailhost.cmc.net,telnet PR tcp len 20 44 -S
Possible to do some TCPDUMPs????? Can you decode the packets and see if there is any source routing or something funny occurring? Tuc/TTSG
Current thread:
- Re: Exodus / Clue problems, (continued)
- Re: Exodus / Clue problems Alex P. Rudnev (Nov 16)
- Re: Exodus / Clue problems Jeff Carneal (Nov 16)
- Re: Exodus / Clue problems Dan Hollis (Nov 15)
- Re: Exodus / Clue problems Jon Lewis (Nov 15)
- Re: Exodus / Clue problems Adam Rothschild (Nov 15)
- Re: Exodus / Clue problems TTSG (Nov 15)
- Re: Exodus / Clue problems TTSG (Nov 15)
- Re: Exodus / Clue problems Dalvenjah FoxFire (Nov 15)
- Re: Exodus / Clue problems Chuck Mead (Nov 15)
- Re: Exodus / Clue problems brian moore (Nov 15)
- Re: Exodus / Clue problems TTSG (Nov 15)
- Re: Exodus / Clue problems alex (Nov 16)
- Re: Exodus / Clue problems Steven J. Sobol (Nov 16)
- Message not available
- Re: Exodus / Clue problems Steve Noble (Nov 18)
- Re: Exodus / Clue problems Steven J. Sobol (Nov 18)
- Re: Exodus / Clue problems Adam Rothschild (Nov 15)