[NBLUG/talk] SuSEFirewall2 How to read the log file?

augie augie at schwer.us
Fri Jul 11 11:28:01 PDT 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Micxz (lovedialup.com) wrote:
> What's a errant packet? How do you think these packets get there?
> There is the possibility someone's looking for a vulnerability like
> you say. I get allot form over-seas. Connections on Microsoft-ds
> ports for example etc. I'm thinking it's infected windows computers
> maybe sending out this stuff. Were do you think most of the packets
> come from?

Errant \Er"rant\, a. [F. errant, p. pr. fr. OF. errer to travel,
   LL. iterare, fr. L. iter journey; confused somewhat with L.
   errare to err. See Eyre, and cf. Arrant, Itinerant.]
   1. Wandering; deviating from an appointed course, or from a
      direct path; roving.

i was just using it to describe how the person on the other end probably
doesn't know what they are doing. that is they art trying to point to a
legitimate service, but they've messed up where to point to, or
somethign along those lines.

most of these scans probably come from script-kiddies, or like you said
infected boxes.

augie.


- --
irc.nblug.org #nblug
registered linux user #229905
gpg public key: http://www.schwer.us/schwer.asc
Key fingerprint = 9815 AE19 AFD1 1FE7 5DEE 2AC3 CB99 2784 27B0 C072

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/DwINy5knhCewwHIRAk5bAJ9+GAA5biQb34ocnjmNvxFAtWM3dQCePlmz
oleIbmS1QPNQgIF/dXlzHrA=
=8ib6
-----END PGP SIGNATURE-----




More information about the talk mailing list