I find the tools on offer at http://combat.uxn.com/ very helpful in
this matter, as they do a lot of the lookup recursion stuff for you
automatically...
HTH - dan.
At 10:26 AM -0400 11/10/00, John Aldrich wrote:
>Hmm...if you know the IP of the source of your attacks you can still
>use "whois" but you'll have to start with whois.arin.net and it'll
>suggest the correct whois server, which would, if it's coming from
>Korea, be either whois.krnic.net or whois.apnic.net. Personally, I'd
>go for whois.apnic.net and then go on to whois.krnic.net if you don't
>get enough info.
--
Nitro - 3D Visualisation, Graphics & Animation
Ph (+61 2) 9810 5177 - Fx (+61 2) 9810 0199
http://www.nitro.com.au/
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list