Exodus / Clue problems
TTSG
ttsg at ttsg.com
Mon Nov 16 02:41:28 UTC 1998
>
> On Sun, Nov 15, 1998 at 06:24:13PM -0500, sigma at pair.com wrote:
> >
> > Let me guess - the IP is 209.67.50.254, and they're trying to login to
> > nameservers as "root", sometimes a dozen times per second?
>
> Not seeing that rate, but yep:
> Nov 15 18:10:25 mailhost.cmc.net ipmon[117]: 18:10:24.956040 le0 @35 b
> 209.67.50.254,1608 -> mailhost.cmc.net,telnet PR tcp len 20 44 -S
>
Possible to do some TCPDUMPs????? Can you decode the packets
and see if there is any source routing or something funny occurring?
Tuc/TTSG
More information about the NANOG
mailing list