Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 14 May 1996 00:42:01 +1000 (EST)
From:      Darren Reed <avalon@coombs.anu.edu.au>
To:        tbalfe@tioga.com (Thomas J Balfe)
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: anyone ever get this message?
Message-ID:  <199605131442.HAA24954@freefall.freebsd.org>
In-Reply-To: <Pine.BSF.3.91.960513062549.2726A-100000@falcon.tioga.com> from "Thomas J Balfe" at May 13, 96 06:26:30 am

next in thread | previous in thread | raw e-mail | index | archive | help
In some mail from Thomas J Balfe, sie said:
> 
> May 13 06:22:39 falcon in.identd[2686]: warning: can't get client 
> address: Socket is not connected
> May 13 06:22:39 falcon in.identd[2686]: connect from unknown

Looks like a half-open port scan.

Linux does similar and on BSD tcp wrappers, for the most part, don't pick
them up.

Unless you have something recording packets, you'll never see the source
address (connection is closed before accept can work).

darren



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199605131442.HAA24954>