From owner-freebsd-questions Tue Nov 6 7: 5:14 2001 Delivered-To: freebsd-questions@freebsd.org Received: from quartz.bos.dyndns.org (quartz.bos.dyndns.org [66.37.218.198]) by hub.freebsd.org (Postfix) with ESMTP id C8CDA37B405 for ; Tue, 6 Nov 2001 07:05:09 -0800 (PST) Received: from localhost (twilde@localhost) by quartz.bos.dyndns.org (8.11.5/8.11.5) with ESMTP id fA6F56U14381; Tue, 6 Nov 2001 10:05:06 -0500 (EST) Date: Tue, 6 Nov 2001 10:05:06 -0500 (EST) From: Tim Wilde X-X-Sender: twilde@quartz.bos.dyndns.org To: Chris Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Have I been hacked? In-Reply-To: <20011106143721.73451.qmail@web14804.mail.yahoo.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Tue, 6 Nov 2001, Chris wrote: > 0.0.0.0,68 255.255.255.255,67 0/0 udp > 9264 3044133 2:00 > > This is something that concerns me since I don't have > any udp ports open incoming and I don't run a dhcp > server off this box. Does anybody know what this > could mean. That looks like an outgoing DHCP client request, not something to do with a DHCP server on the box - is the machine this comes from requesting an IP via DHCP? Check for "dhclient" running in a ps aux or similar. Tim -- Tim Wilde twilde@dyndns.org Systems Administrator Dynamic DNS Network Services http://www.dyndns.org/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message