Let me first thank all those who helped me a few weeks back. I posted regarding an attack we were getting from a certain range of IPs. To make a very long story short, our ISP is now blocking an entire class C for us. There continues to be deny hits on the router. I have suspicions it was nimda, but our frequent client and server scans show no new virii of any sort.
Now a different problem. Sort of. I am seeing a message on the server console (NW 5.0 patched), which says: Server Scan Reported.............. I have searched through the Novell KB, done regular Google and other engine searches, as well as many other places. I cannot find a single doc or TID that has the slightest mention of "Server Scan Reported............". The odd thing is that on the console this message has no time, date, or version stamp, nor does it have an associated NLM displayed. The message appears roughly around midnight every night. How do I know that if there is no time stamp? The console log shows this message consistently appearing after the last entry each day, and before the first entry of the next day. Has anyone seen this particular message before? Great thanks in advance. Seth
