On Sat, Sep 25, 1999 at 08:13:04AM -0600, Tom Reinertson wrote:
> Jim,
>
>
> > If you have no known ftp activity occuring but there are ftp packets being
> > sent to and from your machine, there is only one conclusion I can reach.
> > Your machine has been cracked and your are being used by someone else.
>
> Well, that was my first impression, but from what limited knowledge I have of
> TCP, it seems that all the packets listed by tcpdump have a source address
> and destination address that does not include my machine. It's as if I'm
> just watching traffic between two different machines go by.
Not to fan the flames, but if that is true, your machine may be routing
packets for someone else. Keep in mind, also, that FTP's port command
can be used to send FTP data from one server to another. This would
certainly be in agreement with your observations.
Look into this carefully and assure yourself that you are indeed safe.
--
Gyepi Sam --+-- Designer/Programmer --+-- Network/System Administrator
[EMAIL PROTECTED] --+-- http://www.praxis-sw.com/gyepi
Stamp out organized crime!! Abolish the IRS.
-
To unsubscribe from this list: send the line "unsubscribe linux-diald" in
the body of a message to [EMAIL PROTECTED]
