[Shorewall-users] Is this output safe/normal?

Barry, Christopher cbarry at infiniconsys.com
Thu Jun 5 18:38:14 PDT 2003


netstat -tnap shows the only established connections are on the 192.168.0.0/24 network. top and pstree show nothing unusual. any other ideas?

Thanks,
Chris

*please reply-all



-----Original Message-----
From: Tom Eastep [mailto:teastep at shorewall.net]
Sent: Thursday, June 05, 2003 5:31 PM
To: Barry, Christopher; Shorewall-Users (E-mail)
Subject: Re: [Shorewall-users] Is this output safe/normal?


On Thu, 5 Jun 2003 17:21:11 -0400, Barry, Christopher 
<cbarry at infiniconsys.com> wrote:

>
> All, I just recently unsubscribed, so could you reply to me directly as 
> well please.
>
> This is the output of shorewall show connections. Does this look like a 
> port scanner is running on 192.168.0.8?
> The output of show connections is huge - 50M.
>
> Shorewall v1.2.12
> Linux 2.4.18

I'd run netstat on 192.168.0.8 -- if it is a Linux box, try "netstat - 
tnap"; if it's windoze, then "netstat -anop tcp".

-Tom
-- 
Tom Eastep    \ Shorewall - iptables made easy
Shoreline,     \ http://www.shorewall.net
Washington USA  \ teastep at shorewall.net



More information about the Shorewall-users mailing list