Gyepi,
I certainly appreciate your input on this. I will definitely look into this
further. I guess I need to dig into TCP and learn about IP Chains, too.
Thanks.
Tom
> On Sat, Sep 25, 1999 at 08:13:04AM -0600, Tom Reinertson wrote:
> > Jim,
> >
> >
> > > If you have no known ftp activity occuring but there are ftp packets being
> > > sent to and from your machine, there is only one conclusion I can reach.
> > > Your machine has been cracked and your are being used by someone else.
> >
> > Well, that was my first impression, but from what limited knowledge I have of
> > TCP, it seems that all the packets listed by tcpdump have a source address
> > and destination address that does not include my machine. It's as if I'm
> > just watching traffic between two different machines go by.
>
> Not to fan the flames, but if that is true, your machine may be routing
> packets for someone else. Keep in mind, also, that FTP's port command
> can be used to send FTP data from one server to another. This would
> certainly be in agreement with your observations.
>
> Look into this carefully and assure yourself that you are indeed safe.
> --
> Gyepi Sam --+-- Designer/Programmer --+-- Network/System Administrator
> [EMAIL PROTECTED] --+-- http://www.praxis-sw.com/gyepi
>
> Stamp out organized crime!! Abolish the IRS.
-
To unsubscribe from this list: send the line "unsubscribe linux-diald" in
the body of a message to [EMAIL PROTECTED]
