Re: icmplogd question

2001-02-01 Thread Robert Davidson
On Thu, Feb 01, 2001 at 01:47:33PM -0800, Robert L. Yelvington wrote: > I am not sure if there is a deb pkg for "iptraf" or not, but I would > suggest that to > monitor traffic. Yes there is :) damn nice program too! Regards, Robert Davidson. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] wi

Re: icmplogd question

2001-02-01 Thread Eric Jennings
Well, it's strange, because pinging the box gives a different log entry in syslog (something to the effect of icmplogd: ping from somehost.com), whereas these are different. I don't run any sort of IDS or network monitor. Do you have any suggestions? And, this has only happened twice, and fro

Re: icmplogd question

2001-02-01 Thread Robert L. Yelvington
I am not sure if there is a deb pkg for "iptraf" or not, but I would suggest that to monitor traffic. I would suggest snort http://www.snort.org/ as an IDS. robt Eric Jennings wrote: > > Well, it's strange, because pinging the box gives a different log > entry in syslog (something to the effe

Re: icmplogd question

2001-02-01 Thread Robert L. Yelvington
someone 'ping'd your box or at the very least requested your machine send back icmp replies ...also, looks like some sort of scan, do you run and IDS or network monitor? does this happen from any OTHER hosts or just this one? robt Eric Jennings wrote: > > Hi all- > > Can anyone shed some lig

icmplogd question

2001-02-01 Thread Eric Jennings
Hi all- Can anyone shed some light on this log entry that keeps showing up in my syslog? Feb 1 08:31:37 bubinga icmplogd: source route from [202.173.151.14] Feb 1 08:31:38 bubinga icmplogd: source route from [202.173.151.14] Feb 1 08:31:38 bubinga icmplogd: source route from [202.173.151.14]