[Shorewall-users] Is this output safe/normal?
cbarry at infiniconsys.com
Thu Jun 5 18:38:14 PDT 2003
netstat -tnap shows the only established connections are on the 192.168.0.0/24 network. top and pstree show nothing unusual. any other ideas?
From: Tom Eastep [mailto:teastep at shorewall.net]
Sent: Thursday, June 05, 2003 5:31 PM
To: Barry, Christopher; Shorewall-Users (E-mail)
Subject: Re: [Shorewall-users] Is this output safe/normal?
On Thu, 5 Jun 2003 17:21:11 -0400, Barry, Christopher
<cbarry at infiniconsys.com> wrote:
> All, I just recently unsubscribed, so could you reply to me directly as
> well please.
> This is the output of shorewall show connections. Does this look like a
> port scanner is running on 192.168.0.8?
> The output of show connections is huge - 50M.
> Shorewall v1.2.12
> Linux 2.4.18
I'd run netstat on 192.168.0.8 -- if it is a Linux box, try "netstat -
tnap"; if it's windoze, then "netstat -anop tcp".
Tom Eastep \ Shorewall - iptables made easy
Shoreline, \ http://www.shorewall.net
Washington USA \ teastep at shorewall.net
More information about the Shorewall-users