North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Exodus / Clue problems

  • From: TTSG
  • Date: Sun Nov 15 22:03:33 1998 
> 
> On Sun, Nov 15, 1998 at 06:24:13PM -0500, [email protected] wrote:
> > 
> > Let me guess - the IP is 209.67.50.254, and they're trying to login to
> > nameservers as "root", sometimes a dozen times per second?
> 
> Not seeing that rate, but yep:
> Nov 15 18:10:25 mailhost.cmc.net ipmon[117]: 18:10:24.956040 le0 @35 b
>     209.67.50.254,1608 -> mailhost.cmc.net,telnet PR tcp len 20 44 -S
> 
	Possible to do some TCPDUMPs????? Can you decode the packets
and see if there is any source routing or something funny occurring?

			Tuc/TTSG