Network Errors

[Furmanek, Greg]

Have you noticed any unusual scans on the portsentry??
Since you running firewall do you have antispoofing
enabled??

Do you deny any source 127.0.0.0 on you external interface??
Have you tried to analyze the traffic with a sniffer??

The Wolf


-----Original Message-----
From: Amir Aliabadi [mailto:amir@aliabadi.com]
Sent: Monday, March 20, 2000 7:33 PM
To: plug-discuss@lists.PLUG.phoenix.az.us
Subject: Re: Network Errors


> Are you offering services to the Internet??
Yes, ye basic www, telnet, ftp, mail

> Are you running a firewall??
Yes, ipchains

> Are you logging the connections??
No.

> Do you run Scan sensing software??
Portsentry

>
> This looks disturbing when your loopback interface has tcp errors on it.
That is what i don't understand...

> -----Original Message-----
> From: Amir Aliabadi [mailto:amir@aliabadi.com]
> Sent: Sunday, March 19, 2000 11:03 AM
> To: plug-discuss@lists.PLUG.phoenix.az.us
> Subject: Network Errors
>
>
> I recently noticed I was having a bunch of errors on my ethernet
interfaces.
> Any suggestions on where to start looking?
>
> eth0 is an internal network
> eth1 is plugged into the internet
> and lo is lo (why would I be getting errors on a loop back is kinda
> confusing)
>
> It seems like I started seeing this when I upgraded to 2.2.13 kernal.  I
> should probably bump up to the latest....
>
> lo        Link encap:Local Loopback
>           inet addr:127.0.0.1  Bcast:127.255.255.255  Mask:255.0.0.0
>           UP LOOPBACK RUNNING  MTU:3924  Metric:1
>           RX packets:389518 errors:0 dropped:0 overruns:0
>           TX packets:0 errors:118988302 dropped:389518 overruns:0
>
> eth0      Link encap:Ethernet  HWaddr 00:10:5B:27:08:62
>           inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0
>           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>           RX packets:1272091 errors:267 dropped:0 overruns:288
>           TX packets:0 errors:1232085057 dropped:1423974 overruns:0
>           Interrupt:10 Base address:0x300
>
> eth1      Link encap:Ethernet  HWaddr 00:4F:4A:05:68:16
>           inet addr:209.141.132.195  Bcast:209.141.132.255
> Mask:255.255.255.0
>           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>           RX packets:1677197 errors:0 dropped:0 overruns:0
>           TX packets:42 errors:182048567 dropped:1355452 overruns:62
>           Interrupt:11 Base address:0x280
>
>
>
>
> _______________________________________________
> Plug-discuss mailing list  -  Plug-discuss@lists.PLUG.phoenix.az.us
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>
> _______________________________________________
> Plug-discuss mailing list  -  Plug-discuss@lists.PLUG.phoenix.az.us
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss


_______________________________________________
Plug-discuss mailing list  -  Plug-discuss@lists.PLUG.phoenix.az.us
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss