Re: Sending a message to another computer on the network

[Ken Stevenson]

Maldonado Dennis R SrA AFIA/MSP wrote:

Hello,

Can you tell me how to message other computers on my network?  Thanks

 


DENNIS R. MALDONADO, SrA, USAF

DSN:   312-246-1592

COMM:  505-846-1592

FAX:xxx-xxx-5512

  http://www.rbc.org/odb/odb.shtml

   


"This electronic transmission contains FOR OFFICIAL USE ONLY (FOUO)
information that must be protected under the Privacy Act of 1974 (see AFI
33-332).  Do not release outside of the DoD channels without advance
approval from the sender.  If you received this message in error, please
notify the sender by reply e-mail and delete all copies of this message." 

 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


If you're looking for Winpopup functionality (net send), and you have 
Samba installed, look at


man smbclient

for the -M option.

--
Ken Stevenson
Allen-Myland Inc.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Sending a message to another computer on the network

[Randy Pratt]

On Thu, 9 Mar 2006 15:30:15 - 
Maldonado Dennis R SrA AFIA/MSP <[EMAIL PROTECTED]>
wrote:

> Hello,
> 
> Can you tell me how to message other computers on my network?  Thanks

Take a look at the man pages for "wall", "mesg" and "write".  They
may suit your need for network messaging.

HTH,

Randy

-- 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Sending a message to another computer on the network

[Michael Hernandez]

On Mar 9, 2006, at 10:30 AM, Maldonado Dennis R SrA AFIA/MSP wrote:


Hello,

Can you tell me how to message other computers on my network?  Thanks



If you are looking for something like "net send" on  windows, I'm not  
sure anything exists like that.
If you have a gui, you can always use gaim & jabber, or otherwise I'm  
sure there are console based

jabber clients out there that could help you.

Mike
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Sending a message to another computer on the network

[Maldonado Dennis R SrA AFIA/MSP]

Hello,

Can you tell me how to message other computers on my network?  Thanks

 

DENNIS R. MALDONADO, SrA, USAF

DSN:   312-246-1592

COMM:  505-846-1592

FAX:xxx-xxx-5512

  http://www.rbc.org/odb/odb.shtml

   

"This electronic transmission contains FOR OFFICIAL USE ONLY (FOUO)
information that must be protected under the Privacy Act of 1974 (see AFI
33-332).  Do not release outside of the DoD channels without advance
approval from the sender.  If you received this message in error, please
notify the sender by reply e-mail and delete all copies of this message." 

 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Sending a message to another computer on the network

[Hasse]

On Sunday 06 June 2004 08.16, Ian Smith wrote:
> On Sat, 5 Jun 2004 [EMAIL PROTECTED] wrote:
>  > I'm on a FreeBSD 4.10-STABLE machine on 217.209.211.x ,
>  > and would like to send a message to Win-box ( on the same network, but
>  > not my machine ) that's filling up my  httpd-access.log with junk.
>
> Yes, these log-bombs are a pain, making it difficult (and slow) to scan
> webserver logs with, say, less .. I had to write a script run hourly to
> clean these out of our main apache and several vhost logs.
>
> How can you be sure that they're coming from a Windows box, though?
>
>  > The only thing I know is his IP-adress.
>  > Is this possible ? If it is, how.
>  > Or do I have to block his IP ?
>
> Not much use if it changes, as you say yourself later .. best just send
> a few of these log entries, with your later list of times received, to
> your/his ISP asking for some action to hassle the (l)user concerned.
>
>  > The junk I receive in my log looks like this :
>  > -
>  > httpd-error.log :
>  >  [Sat Jun 05 14:13:43 2004] [error] [client 217.209.211.183]
>  > request failed: URI too long (longer than 8190)
>
> Yes, they're all around 8300 bytes here, obvious buffer-overflow fodder,
> though I don't know which webserver/s are targetted. Some days we get
> between 10-20 per day from a range of IPs in the north-east Asia region,
> where it's almost never any use trying to contact the ISPs concerned.
>
>  > -
>  > httpd-access.log :
>  > 
>  > 217.209.211.183 - - [05/Jun/2004:14:11:28 +0200] "SEARCH /\x90\x02\xb1\
>  > 
>  > and the last line ending with :
>  > \x90\x90\x90\x90" 414 391 "-" "-"
>  > 
>
> Them's the ones.  You're in a much better position than we are to stop
> these, being (at least apparently) from IPs of your own ISP.
>
> I'm unsure whether these are real attack attempts by some worm, or are
> just designed as log bombs.  Either way, they got me scriptin' .. email
> me (anyone) if you could use my apache.logclean sh script.  It's a bit
> heavy-duty (having to stop apache briefly to clean logs) but has made
> maintenance easier here, and kept log sizes down by up to 150K per day.
>
> Cheers, Ian
>
> ___
Well, cause he was such a pain in the .. , I took the liberty to let nmap scan 
his IP-address and it reported the OS as Windows

I've started to receive more logentries from other IP-addresses in the same 
range now, so it looks like it's escalating.

It's now reported to the ISP. Then we will see :-)

/ Hasse.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Sending a message to another computer on the network

[Ian Smith]

On Sat, 5 Jun 2004 [EMAIL PROTECTED] wrote:

 > I'm on a FreeBSD 4.10-STABLE machine on 217.209.211.x ,
 > and would like to send a message to Win-box ( on the same network, but not my 
 > machine ) that's filling up my  httpd-access.log with junk.

Yes, these log-bombs are a pain, making it difficult (and slow) to scan
webserver logs with, say, less .. I had to write a script run hourly to
clean these out of our main apache and several vhost logs.

How can you be sure that they're coming from a Windows box, though?

 > The only thing I know is his IP-adress.
 > Is this possible ? If it is, how.
 > Or do I have to block his IP ?

Not much use if it changes, as you say yourself later .. best just send
a few of these log entries, with your later list of times received, to
your/his ISP asking for some action to hassle the (l)user concerned.

 > The junk I receive in my log looks like this :
 > -
 > httpd-error.log :
 >  [Sat Jun 05 14:13:43 2004] [error] [client 217.209.211.183] request 
 > failed: URI too long (longer than 8190)

Yes, they're all around 8300 bytes here, obvious buffer-overflow fodder,
though I don't know which webserver/s are targetted. Some days we get
between 10-20 per day from a range of IPs in the north-east Asia region,
where it's almost never any use trying to contact the ISPs concerned.

 > -
 > httpd-access.log :
 > 
 > 217.209.211.183 - - [05/Jun/2004:14:11:28 +0200] "SEARCH /\x90\x02\xb1\
 > 
 > and the last line ending with :
 > \x90\x90\x90\x90" 414 391 "-" "-"
 > 

Them's the ones.  You're in a much better position than we are to stop
these, being (at least apparently) from IPs of your own ISP.

I'm unsure whether these are real attack attempts by some worm, or are
just designed as log bombs.  Either way, they got me scriptin' .. email
me (anyone) if you could use my apache.logclean sh script.  It's a bit
heavy-duty (having to stop apache briefly to clean logs) but has made
maintenance easier here, and kept log sizes down by up to 150K per day.

Cheers, Ian

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Sending a message to another computer on the network

[Hasse]

On Saturday 05 June 2004 15.22, Warren Block wrote:
> On Sat, 5 Jun 2004, Hasse wrote:
> > I'm on a FreeBSD 4.10-STABLE machine on 217.209.211.x ,
> > and would like to send a message to Win-box ( on the same network, but
> > not my machine ) that's filling up my  httpd-access.log with junk.
> > The only thing I know is his IP-adress.
> > Is this possible ? If it is, how.
> > Or do I have to block his IP ?
> >
> >From the log you posted, it looks like it's trying to attack your web
>
> server with a buffer overflow.  Probably this is a compromised Windows
> machine, and the owner isn't aware it's doing this, but either way, you
> should contact your ISP.  Telia doesn't seem to be very different from
> most larger ISPs, and they may not react quickly or at all.  You could
> also try using smbclient (part of the Samba port) to send a Windows
> popup message to that machine.
>
> -Warren Block * Rapid City, South Dakota USA
> ___

Yes, I think I'll give it a try with smbclient.
If I get no response, I guess I have to report him. For what good that will do
Thx everybody for your efforts.
/ Hasse
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Sending a message to another computer on the network

[Hasse]

On Saturday 05 June 2004 15.20, Yasir Malik wrote:
> > -
> > httpd-access.log :
> > 
> > 217.209.211.183 - - [05/Jun/2004:14:11:28 +0200] "SEARCH /\x90\x02\xb1\
> > 
> > and the last line ending with :
> > \x90\x90\x90\x90" 414 391 "-" "-"
> > 
>
> He's obviously trying to hack into your system using some escape character
> sequence.  Report him.
> Yasir
> ___
Hi.
Do you think he is aware of this ?
I mean doing it deliberatly. I think he got one of them worms.
Look at the frequency :
[Sat Jun 05 12:10:18 2004] [error] [client 217.209.211.183] request failed: 
URI too long (longer than 8190)
[Sat Jun 05 12:11:54 2004]
[Sat Jun 05 12:12:56 2004]
[Sat Jun 05 12:13:14 2004]
[Sat Jun 05 12:13:45 2004]
[Sat Jun 05 12:15:27 2004]
[Sat Jun 05 12:15:45 2004]
[Sat Jun 05 12:17:23 2004]
[Sat Jun 05 12:18:25 2004]
[Sat Jun 05 12:18:27 2004]
[Sat Jun 05 12:18:51 2004]
[Sat Jun 05 12:19:04 2004]
[Sat Jun 05 12:20:25 2004]
[Sat Jun 05 12:21:10 2004]
[Sat Jun 05 12:22:13 2004]
[Sat Jun 05 12:24:14 2004]
[Sat Jun 05 12:25:35 2004]
[Sat Jun 05 12:27:30 2004]
[Sat Jun 05 12:27:48 2004]
[Sat Jun 05 12:28:45 2004]
[Sat Jun 05 12:31:16 2004]
[Sat Jun 05 12:37:25 2004]
[Sat Jun 05 12:40:59 2004]
[Sat Jun 05 12:48:49 2004]
[Sat Jun 05 12:55:43 2004]
[Sat Jun 05 12:59:14 2004]
[Sat Jun 05 13:04:25 2004]
[Sat Jun 05 13:08:03 2004]
[Sat Jun 05 13:09:21 2004]
[Sat Jun 05 13:11:20 2004] 
[Sat Jun 05 13:14:24 2004]
[Sat Jun 05 13:21:14 2004]
[Sat Jun 05 13:23:47 2004] 
[Sat Jun 05 13:24:06 2004]
[Sat Jun 05 13:27:27 2004]
[Sat Jun 05 13:36:04 2004]
[Sat Jun 05 13:38:15 2004] 
[Sat Jun 05 13:41:58 2004] 
[Sat Jun 05 13:57:12 2004]

/ Hasse
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Sending a message to another computer on the network

[Hasse]

On Saturday 05 June 2004 14.31, Michal Pasternak wrote:
> Hasse [Sat, Jun 05, 2004 at 02:25:49PM +0200]:
> > I'm on a FreeBSD 4.10-STABLE machine on 217.209.211.x ,
> > and would like to send a message to Win-box ( on the same network, but
> > not my machine ) that's filling up my  httpd-access.log with junk.
> > The only thing I know is his IP-adress.
>
> What?
>
> Lookup his/hers IP via whoisdb (www.ripe.net) and report abuse to proper
> Internet Service Provider.
>
> > Is this possible ? If it is, how.
>
> smbclient -M
>
> > Or do I have to block his IP ?
>
> That's also an option.
> ___
Thx for your replay.
Well, I've allready tried whois, host -a, dig, and so on, but it's not giving 
me any more then telling me who's the ISP, and I allready know that.
Same as mine :-)  
The problem with blocing his is IP is that it's dynamic, next time he reboot, 
he'll be back with another one. So then I have to block the hole range, and 
that's rather drastic.

What I was looking for, was a way to notify the poor guy so he could take some 
proper action to clean his machine. He is probably not aware of the problem.

I'll have a look at smbclient

/ Hasse
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Sending a message to another computer on the network

[Warren Block]

On Sat, 5 Jun 2004, Hasse wrote:
I'm on a FreeBSD 4.10-STABLE machine on 217.209.211.x ,
and would like to send a message to Win-box ( on the same network, but not my
machine ) that's filling up my  httpd-access.log with junk.
The only thing I know is his IP-adress.
Is this possible ? If it is, how.
Or do I have to block his IP ?

From the log you posted, it looks like it's trying to attack your web 
server with a buffer overflow.  Probably this is a compromised Windows 
machine, and the owner isn't aware it's doing this, but either way, you 
should contact your ISP.  Telia doesn't seem to be very different from 
most larger ISPs, and they may not react quickly or at all.  You could 
also try using smbclient (part of the Samba port) to send a Windows 
popup message to that machine.

-Warren Block * Rapid City, South Dakota USA
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Sending a message to another computer on the network

[Yasir Malik]

> -
> httpd-access.log :
> 
> 217.209.211.183 - - [05/Jun/2004:14:11:28 +0200] "SEARCH /\x90\x02\xb1\
> 
> and the last line ending with :
> \x90\x90\x90\x90" 414 391 "-" "-"
> 

He's obviously trying to hack into your system using some escape character
sequence.  Report him.
Yasir
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Sending a message to another computer on the network

[Michal Pasternak]

Hasse [Sat, Jun 05, 2004 at 02:25:49PM +0200]:
> I'm on a FreeBSD 4.10-STABLE machine on 217.209.211.x ,
> and would like to send a message to Win-box ( on the same network, but not my 
> machine ) that's filling up my  httpd-access.log with junk.
> The only thing I know is his IP-adress.

What?

Lookup his/hers IP via whoisdb (www.ripe.net) and report abuse to proper
Internet Service Provider.

> Is this possible ? If it is, how.

smbclient -M

> Or do I have to block his IP ?

That's also an option.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Sending a message to another computer on the network

[Hasse]

Hi all.
I'm on a FreeBSD 4.10-STABLE machine on 217.209.211.x ,
and would like to send a message to Win-box ( on the same network, but not my 
machine ) that's filling up my  httpd-access.log with junk.
The only thing I know is his IP-adress.
Is this possible ? If it is, how.
Or do I have to block his IP ?
The junk I receive in my log looks like this :
-
httpd-error.log :
 [Sat Jun 05 14:13:43 2004] [error] [client 217.209.211.183] request 
failed: URI too long (longer than 8190)

-
httpd-access.log :

217.209.211.183 - - [05/Jun/2004:14:11:28 +0200] "SEARCH /\x90\x02\xb1\

and the last line ending with :
\x90\x90\x90\x90" 414 391 "-" "-"

Appreciate any help on this

TIA
/ Hasse.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"