Hi,
one of our machines ("office") was suddenly causing a *real* lot of
strange traffic, causing quite some costs. Tcpdump showed the
following output. I'd be happy about any explanation. Is this some
sign of attack? I did not find the IP number 62.236.92.1 in any logfile.
Thanks,
Jochen
13:53:46.171012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.171012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.171012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.171012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.171012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.181012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.181012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.181012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.181012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.181012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.181012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.191012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.191012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.191012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.191012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.191012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.191012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.191012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.191012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.191012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.191012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.191012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.191012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.201012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.201012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.201012 office > 62.236.92.1: (frag 35482:[EMAIL PROTECTED])
13:53:46.201012 office > 62.236.92.1: icmp: echo request (frag
35482:[EMAIL PROTECTED])
13:53:46.221012 office > 62.236.92.1: (frag 35483:[EMAIL PROTECTED])
13:53:46.221012 office > 62.236.92.1: (frag 35483:[EMAIL PROTECTED])
13:53:46.221012 office > 62.236.92.1: (frag 35483:[EMAIL PROTECTED])
13:53:46.221012 office > 62.236.92.1: (frag 35483:[EMAIL PROTECTED])
13:53:46.221012 office > 62.236.92.1: (frag 35483:[EMAIL PROTECTED])
13:53:46.221012 office > 62.236.92.1: (frag 35483:[EMAIL PROTECTED])
13:53:46.221012 office > 62.236.92.1: (frag 35483:[EMAIL PROTECTED])
13:53:46.221012 office > 62.236.92.1: (frag 35483:[EMAIL PROTECTED])
13:53:46.221012 office > 62.236.92.1: (frag 35483:[EMAIL PROTECTED])
13:53:46.221012 office > 62.236.92.1: (frag 35483:[EMAIL PROTECTED])
13:53:46.221012 office > 62.236.92.1: (frag 35483:[EMAIL PROTECTED])
13:53:46.221012 office > 62.236.92.1: (frag 35483:[EMAIL PROTECTED])
13:53:46.221012 office > 62.236.92.1: (frag 35483:[EMAIL PROTECTED])
13:53:46.221012 office > 62.236.92.1: (frag 35483:[EMAIL PROTECTED])
13:53:46.221012 office > 62.236.92.1: (frag 35483:[EMAIL PROTECTED])
13:53:46.221012 office > 62.236.92.1: (frag 35483:[EMAIL PROTECTED])
13:53:46.221012 office > 62.236.92.1: (frag 35483:[EMAIL PROTECTED])
13:53:46.221012 office > 62.236.92.1: (frag 35483:[EMAIL PROTECTED])
13:53:46.221012 office > 62.236.92.1: (frag 35483:[EMAIL PROTECTED])
13:53:46.241012 office > 62.236.92.1: (frag 35483:[EMAIL PROTECTED])
13:53:46.241012 office > 62.236.92.1: (frag 35483:[EMAIL PROTECTED])
--
Jochen Wiedmann [EMAIL PROTECTED]
How come the .45 is the worlds only functional +49 7123 14887
point and click interface? (Alan Cox)
