-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ok this started at 8:55 this morning:

    Nov 21 09:58:04 linux xntpd[3799]: recvfrom() fd=9: Connection
refused
    Nov 21 09:59:08 linux xntpd[3799]: recvfrom() fd=9: Connection
refused
    Nov 21 10:00:12 linux xntpd[3799]: recvfrom() fd=9: Connection
refused
    Nov 21 10:02:20 linux xntpd[3799]: recvfrom() fd=9: Connection
refused
    Nov 21 10:04:28 linux xntpd[3799]: recvfrom() fd=9: Connection
refused
    Nov 21 10:05:32 linux xntpd[3799]: recvfrom() fd=9: Connection
refused
    Nov 21 10:06:36 linux xntpd[3799]: recvfrom() fd=9: Connection
refused
    Nov 21 10:07:40 linux xntpd[3799]: recvfrom() fd=9: Connection
refused

It repeats every minute or so. No I run xntpd3 5.93 for my internal
network to keep the windows boxes in sync with the RedHat 6.2 box. Is
this someone trying to hammer at xntpd for an exploit or just someone
just hammering at the door to flood my connection? Or just someone
trying to flood out /var/log/messages?

- -----------------------------------------------------------------
Sonja Michelle Lina Thomas

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBOhqtkkMEEOy70wAmEQLilwCg9i2kjjhXUZVOblT7o26wn6neJ6oAoKyh
9osVkKGSBavDRaloC9pTfeTf
=/PZT
-----END PGP SIGNATURE-----