can anyone suggest a good trace program or trace router?
i received another code red or sircam attempt:
210.102.220.95 - - [11/Sep/2001:18:48:20 +0800] "GET
/default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%
u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
HTTP/1.0" 404 334
kawawa naman sysad nito. tinamaan siya ng virus.
now there is also someone trying to ping flood us...
kernel: IP_MASQ:reverse ICMP: failed checksum from 203.167.81.150!
Our junior sysad was able to trace this to a Drivenet company. Local siya.
Mukhang naka-pre-paid card yung mokong.
Anyway, sana mabigyan niyo ako ng tracing program. Something that can give
me an idea who is trying to enter our servers.
Thanks.
Fritz Mesedilla
Systems Administrator
Summit Interactive, Inc.
FHM | Seventeen | Candy | Cosmopolitan | Preview | Good Housekeeping
femalenetwork.com | candymag.com | fhm.com.ph | cosmo.com.ph
Palm Pilot Software: TVSked - Download from the link below
----------------------------------------------------------------------------
http://mesedilla.tripod.com +Basta Ikaw Lord
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
To subscribe to the Linux Newbies' List: send "subscribe" in the body to
[EMAIL PROTECTED]
