On Wed, 23 Aug 2000, Enrico Sorge wrote:
> Reading what phoneboy wrote, could be true in my case, only if i could know
> or translate this code in human readable format, and so checkin' in the
> rules written in syslog
>
> <d468a088,127e,d468a109,35,11;0,4002,2030300> <0 : =0 19>
> <d468a088,127e,d468a109, 0,11;0,4002,2030300> <0 : =0 19>
> <d468a088,128b,d468a109,35,11;0,4002,2030300> <0 : =0 19>
> <d468a088,128b,d468a109, 0,11;0,4002,2030300> <0 : =0 19>
it is just hex.
d4 68 a0 88 is 212.104.160.136
127e is 4734
d4 68 a0 109 is 212.104.160.265
35 is 53
11 is 17
so, it is most likely:
src is 212.104.160.136 port 4734, dst is 212.104.160.265 port 53, protocol
is 17 (udp).
i.e., DNS
- brett
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
