On Mon, 18 Dec 2017, Paul Heinlein wrote:
Logwatch isn't reporting the server-side port; it's reporting the initiating port on the client side, which for most TCP clients is high and random.
Paul, I didn't know this. Thanks for explaining.
In other words, the output above is completely normal.
That was my assumption. Regards, Rich _______________________________________________ PLUG mailing list PLUG@pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
