nanog mailing list archives
Re: Tracing where it started
From: Charles Sprickman <spork () inch com>
Date: Sat, 25 Jan 2003 22:30:56 -0500 (EST)
On Sat, 25 Jan 2003, Brian Coyle wrote:
I have a similar packet (but only one) from the same host (time is ntp sync'd EST). Jan 20 12:55:47 firewall kernel: Packet log: input - ppp0 PROTO=17 67.8.33.179:1 65.83.153.253:1434 L=29 S=0x00 I=20300 F=0x0000 T=110 (#23)
That's a busy machine apparently: Jan 19 01:13:16 gw ipmon[32123]: 01:13:15.993484 ed0 @0:20 b 67.8.33.179,1 -> 66.92.x.x,1434 PR udp len 20 29 IN (also EST, NTP synced) C
- -- Redundancy? You can say that again! -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Brian Coyle, GCIA http://www.giac.org/GCIA.php iD8DBQE+Mz9gER3MuHUncBsRAuG3AJ0Xzd+QiDeX6LKHX4frfRF40xJK8gCfUgXw g7uoFXH2N72uwLudo2OuvpI= =Kw/8 -----END PGP SIGNATURE-----
Current thread:
- Re: mSQL Attack/Peering/OBGP/Optical exchange, (continued)
- Re: mSQL Attack/Peering/OBGP/Optical exchange Stephen Stuart (Jan 31)
- Re: mSQL Attack/Peering/OBGP/Optical exchange Vijay Gill (Jan 31)
- Re: mSQL Attack/Peering/OBGP/Optical exchange Randy Bush (Jan 31)
- Re: mSQL Attack/Peering/OBGP/Optical exchange Stephen Stuart (Jan 31)
- Re: mSQL Attack/Peering/OBGP/Optical exchange Jack Bates (Jan 31)
- Re: mSQL Attack/Peering/OBGP/Optical exchange Stephen Stuart (Jan 31)
- Re: mSQL Attack/Peering/OBGP/Optical exchange Iljitsch van Beijnum (Jan 31)
- Re: mSQL Attack/Peering/OBGP/Optical exchange Jack Bates (Jan 31)
- Re: Tracing where it started Stephen Milton (Jan 26)
- Re: Tracing where it started Brian Coyle (Jan 25)
- Re: Tracing where it started Charles Sprickman (Jan 25)
- Re: Tracing where it started Brian Coyle (Jan 25)