Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 12 Nov 1998 01:00:12 -0500
From:      Timothy J Luoma <public+FreeBSD@fdt.net>
To:        Willow <willow@tds.edu>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: tcpd
Message-ID:  <199811120600.BAA28141@ocalhost>
In-Reply-To: <Pine.BSF.4.05.9811091702040.7148-100000@zeus.tds.edu>
References:  <Pine.BSF.4.05.9811091702040.7148-100000@zeus.tds.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
	Author:	Willow <willow@tds.edu>
	Date:	Mon, 9 Nov 1998 17:06:27 -0500 (EST)
	ID:	<Pine.BSF.4.05.9811091702040.7148-100000@zeus.tds.edu>

> After reconfiguring my /etc/inetd.conf file to make use of tcp_wrappers
> (tcpd) I get the following every once and awhile in /var/log/messages and
> to /dev/console:
>
> identd[pid]: warning: can't get client address: socket is not connected

I believe this usually indicates you have been hit by a port-scanner that  
only opened the connection part-way so-as to avoid detection (ie you didn't  
get the remote IP, etc)

TjL

ps -- tcpdump often gets connections that tcpd does not, IME



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199811120600.BAA28141>