I am using Redhat 9.0, Kernal is 2.4.20-8 and iptables
is v1.2.7a.
My question, I have these suspicious entries on my
ip_conntrack file:
************************************************
tcp 6 425766 ESTABLISHED src=192.168.0.251
dst=192.168.0.69 sport=43121 dport=80 [UNREPLIED]
src=192.168.0.69 dst=192.168.0.251 sport=80
dport=43121 use=1
tcp 6 425328 ESTABLISHED src=192.168.0.251
dst=192.168.0.97 sport=34857 dport=80 [UNREPLIED]
src=192.168.0.97 dst=192.168.0.251 sport=80
dport=34857 use=1
tcp 6 425766 ESTABLISHED src=192.168.0.251
dst=192.168.0.70 sport=43121 dport=80 [UNREPLIED]
src=192.168.0.70 dst=192.168.0.251 sport=80
dport=43121 use=1
tcp 6 425328 ESTABLISHED src=192.168.0.251
dst=192.168.0.98 sport=34857 dport=80 [UNREPLIED]
src=192.168.0.98 dst=192.168.0.251 sport=80
dport=34857 use=1
tcp 6 425271 ESTABLISHED src=192.168.0.251
dst=192.168.0.71 sport=43121 dport=80 [UNREPLIED]
src=192.168.0.71 dst=192.168.0.251 sport=80
dport=43121 use=1
tcp 6 424833 ESTABLISHED src=192.168.0.251
dst=192.168.0.99 sport=34857 dport=80 [UNREPLIED]
src=192.168.0.99 dst=192.168.0.251 sport=80
dport=34857 use=1
****************************************************
The entries are incremental. Is my computer hacked?
or it is a virus on the network? Anybody had similar
problem?
Thanks.
Al
__________________________________
Yahoo! Mail for Mobile
Take Yahoo! Mail with you! Check email on your mobile phone.
http://mobile.yahoo.com/learn/mail
_________________________________________________
Philippine Linux Users' Group (PLUG) Mailing List
[email protected] (#PLUG @ irc.free.net.ph)
Read the Guidelines: http://linux.org.ph/lists
Searchable Archives: http://archives.free.net.ph
