broadcasts & scanning

Craig White CraigWhite@AzApple.com
Tue, 28 Mar 2000 16:58:49 -0700


Repost of a message I sent last Friday...nobody commented (at least that I
saw but I was down for a day - another message)

Can anyone enlighten me?  Enclosed is a very small clip of a log (computer
attached to Cox@Work system) that shows activity that I would interpret as
someone broadcasting/port scanning. What does it tell me below?

TIA
Craig

Mar 24 17:15:08 mail kernel: Packet log: input REJECT eth1 PROTO=17
24.1.222.149:1758 24.1.223.255:39213 L=140 S=0x00 I=53255 F=0x0000 T=128
(#15)
Mar 24 17:15:12 mail kernel: Packet log: input REJECT eth1 PROTO=17
24.1.222.149:1759 24.1.223.255:39213 L=140 S=0x00 I=53511 F=0x0000 T=128
(#15)
Mar 24 17:15:16 mail kernel: Packet log: input REJECT eth1 PROTO=17
24.1.222.149:1760 24.1.223.255:39213 L=140 S=0x00 I=53767 F=0x0000 T=128
(#15)

----:----|----:----|----:----|----:----|----:----|----:----|
- Craig White - PO Box 8634 - Scottsdale, Arizona - 85252
- e-mail address ................ - CraigWhite@AzApple.com
- world wide web address ........ - http://www.AzApple.com
- e-mail my pager address ....... - 6023779752@airtouch.net
- cellular phone ................ - (602) 377-9752
- voice/facsimile ............... - (480) 945-8445
----:----|----:----|----:----|----:----|----:----|----:----|