Ok this started at 8:55 this morning:
Nov 21 09:58:04 linux xntpd[3799]: recvfrom() fd=9: Connection
refused
Nov 21 09:59:08 linux xntpd[3799]: recvfrom() fd=9: Connection
refused
Nov 21 10:00:12 linux xntpd[3799]: recvfrom() fd=9: Connection
refused
Nov 21 10:02:20 linux xntpd[3799]: recvfrom() fd=9: Connection
refused
Nov 21 10:04:28 linux xntpd[3799]: recvfrom() fd=9: Connection
refused
Nov 21 10:05:32 linux xntpd[3799]: recvfrom() fd=9: Connection
refused
Nov 21 10:06:36 linux xntpd[3799]: recvfrom() fd=9: Connection
refused
Nov 21 10:07:40 linux xntpd[3799]: recvfrom() fd=9: Connection
refused
It repeats every minute or so. No I run xntpd3 5.93 for my internal
network to keep the windows boxes in sync with the RedHat 6.2 box. Is
this someone trying to hammer at xntpd for an exploit or just someone
just hammering at the door to flood my connection? Or just someone
trying to flood out /var/log/messages?
- -----------------------------------------------------------------
Sonja Michelle Lina Thomas
(text/plain)