all, I am not sure wether this is related to the new worm, I shutdown all services (httpd, named, squid ...), disconnected my LAN and the LAN based router shows no packages. Yet I still get this when I run ngrep on the internet based card. In case you ask the empty hash are dport 80 based requests: ## I 203.63.73.52 -> 210.126.155.34 3:1 [email protected]....~."..][email protected].......... ## I 203.63.73.52 -> 210.179.14.129 3:1 ....E..,[email protected].........]....P...I....`. .}....... ## I 203.63.73.52 -> 210.126.79.69 3:1 [email protected]..~OE..]....P{ ......p.@............. ## I 203.63.73.52 -> 210.126.155.34 3:1 [email protected]....~."..][email protected].......... ## I 203.63.73.52 -> 210.196.171.242 3:1 ....E..,[email protected]......]....P........`. ......... ## I 203.63.73.52 -> 210.179.14.129 3:1 ....E..,[email protected].........]....P...I....`. .}....... Any ideas? jobst -- Programmer - an organism that turns coffee into software ! __, Jobst Schmalenbach, [EMAIL PROTECTED], Technical Director _ _.--'-n_/ Barrett Consulting Group P/L & The Meditation Room P/L -(_)------(_)= +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
