[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-users] Raq550: Port Scans - need help
- Subject: [cobalt-users] Raq550: Port Scans - need help
- From: "John D. Gorena" <Support@xxxxxxxxxxxxxxxxxxx>
- Date: Sun Mar 9 20:50:01 2003
- Organization: http://www.JMG-Enterprises.com
- List-id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
I know that I have asked this before but the info does not make sense to me. Maybe one of you
Raq550 owners can shed some light on this subject.
I get the following and according to the message it looks like the scan comes from my system going
out (outbound). Do other owners see this?
This alert notification is to inform you of network activity occurring on your host.
Timestamp: Thu 12 Dec 2002 03:22:47 AM CST
Alert Type: Port Scan Detected
Interface: eth0
Protocol: tcp
Packet Size (bytes): 40
Source Address: 65.169.119.101
Source port: 27374
Direction: outbound
Destination Address: 211.215.42.85
Destination Port: 2021
Log Entry: eth0:portscan: tcp 65.169.119.101/27374 -> 211.215.42.85/2021 40 rst (16)