I'm not sure if this would be useful for you, but try plugging the info you
sent into this webpage:

http://logi.cc/linux/NetfilterLogAnalyzer.php3

Francisco Neira did pen these words on  4/10/02 at 4:12 PM

>Hi all,
>
>Could someone please explain me or reference what those square brackets
>mean? 172.10.1.60 is a masked SMTP server (as 200.37.247.3) behind the
>firewall. Why a ICMP after a SMTP attempt? I don't get it.
>
>IN=eth1 OUT=eth0 SRC=209.220.116.254 DST=172.10.1.60 LEN=56 TOS=0x00
>PREC=0x00 TTL=10 ID=8530 PROTO=ICMP TYPE=11 CODE=0 [SRC=200.37.247.2
>DST=208.36.88.75 LEN=44 TOS=0x00 PREC=0x00 TTL=1 ID=8122 DF PROTO=TCP
>SPT=3551 DPT=25 WINDOW=4352 RES=0x08 ACK FIN URGP=0 ]
>
>Regards,
>
>Francisco
>
>
>
>
>_______________________________________________
>Redhat-list mailing list
>[EMAIL PROTECTED]
>https://listman.redhat.com/mailman/listinfo/redhat-list



Mark McKibben     [EMAIL PROTECTED]
http://www.avalon.net/~manzabar
ICQ#  8476502

Experience is that marvelous thing that enables you recognize a mistake
when you make it again.
 - Unknown



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to