Re: [LIH] Re: unauthorized access attempt - portscan

[Suresh Ramasubramanian]

Krishna Rao SN saw fit to inform LI that: 

>I am new to Linux. Kindly tell me which report/log files to check & where it is 
>located?
>It is urgent. May be someone is using my system to portscans of port 111.

/var/log/messages should do for a start - and /var/log/maillog to see if
you have any mails going out of your system.

Check the other files in /var/log as well.

-suresh


-- 
Suresh Ramasubramanian | sureshr at staff.juno.com
The problem with any unwritten law is that you don't know where to go
to erase it.
                -- Glaser and Way

-----------------------------------------------------------------------
Check out the 'What to do before posting to the list' site
for a list of things to try before posting.  The site is
at http://botsie.tripod.com/beforeposting/