Is there any documentation for understanding the output into the services
file in the /var/log directory? I seem to be getting a lot of different
requests for port 0 from all kinds of different ip addresses for some
reason; in the last 5 minutes I have had over 2 dozen ip addresses be
DENY'ed. I get output like this:
Packet log: input DENY eth0 PROTO=24.69.13.250:8 24.1.221.97:0 L=28 S=0x00
I=55837 F=0x0000 T=104 (#76)
All I seem to understand from this line is someone was denied connecting to
my port 0 from someone's port #8. At first I thought it was a Gnapster
thing(I keep it running at all times) but I actually don't get hit very much
on that...
-------------------------------------------
Lucas Vogel, Software Developer
Exponent Failure Analysis Associates, Inc.
lvogel@exponent.com
(623)587-6739
(text/plain)