[luau] Help deciphering portscan entries in /var/log/messages

Eric Hattemer hattenator at imapmail.org
Thu Dec 12 19:56:01 PST 2002


Honestly, I know next to nothing about networking and try hard not to
learn any more than I absolutely need in life.  So I hope someone else
answers this question properly.  I think it could be possible that its
trying to use your system as a router to get to the 12.x device.  Either
that or its some tricky stealth scan that routes to you, but says its
routing to another address in order to trick you.  But yeah, I hope
someone else answers this with some expertise.  

-Eric Hattemer

On Thu, 2002-12-12 at 21:37, Ben Beeson wrote:
> Eric and Vince,
> 
> 	So essentially, snort is seeing a lot of other traffic on my external 
> interface that is not necessarily destined for my box.  Is that right???
> 
> Mahalos,
> 
> Ben 
> _______________________________________________
> LUAU mailing list
> LUAU at videl.ics.hawaii.edu
> http://videl.ics.hawaii.edu/mailman/listinfo/luau
-- 
Eric Hattemer <hattenator at imapmail.org>




More information about the LUAU mailing list