Date: Tue, 9 Apr 1996 11:56:09 -0400 From: Garrett Wollman <wollman@lcs.mit.edu> To: joerg_wunsch@uriah.heep.sax.de (Joerg Wunsch) Cc: freebsd-current@FreeBSD.org (FreeBSD-current users) Subject: Re: routed delete my PPP default: how to fight it? Message-ID: <9604091556.AA29064@halloran-eldar.lcs.mit.edu> In-Reply-To: <199604090736.JAA08067@uriah.heep.sax.de> References: <199604090621.XAA03064@silvia.HIP.Berkeley.EDU> <199604090736.JAA08067@uriah.heep.sax.de>
index | next in thread | previous in thread | raw e-mail
<<On Tue, 9 Apr 1996 09:36:39 +0200 (MET DST), J Wunsch <j@uriah.heep.sax.de> said: >> Connection attempt to TCP 136.152.64.181:113 from 136.152.64.181:60781 >> Connection attempt to TCP 136.152.64.181:113 from 136.152.64.181:3818 > That's ``auth''. I've always wondered at my machine at work (where i > tcpdump all traffic that's going through the Internet router) who is > connecting to this port. It's also somehow related to sendmail. Note that there is a bug in the logging code in that it calls inet_ntoa() twice as an argument to printf() and expects it to return a different value... > Does anybody know more about ``auth''? It's a brain-damaged way of getting a string back from a remote machine which purports to represent the identity of the user who opened a particular connection. ``auth'' is a misnomer; it's officially called ``ident'', which isn't much better. >> Connection attempt to UDP 136.152.64.181:1647 from 136.152.64.181:53 > Looks like a reply for a DNS query, where the querying process has > been terminated before the answer arrived. Looks like a remote disk-filling service to me... -GAWollman -- Garrett A. Wollman | Shashish is simple, it's discreet, it's brief. ... wollman@lcs.mit.edu | Shashish is the bonding of hearts in spite of distance. Opinions not those of| It is a bond more powerful than absence. We like people MIT, LCS, ANA, or NSA| who like Shashish. - Claude McKenzie + Florent Vollanthelp
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9604091556.AA29064>