From owner-freebsd-current Tue Apr 9 08:58:09 1996 Return-Path: owner-current Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id IAA21264 for current-outgoing; Tue, 9 Apr 1996 08:58:09 -0700 (PDT) Received: from halloran-eldar.lcs.mit.edu (halloran-eldar.lcs.mit.edu [18.26.0.159]) by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id IAA21226 for ; Tue, 9 Apr 1996 08:57:38 -0700 (PDT) Received: by halloran-eldar.lcs.mit.edu; (5.65/1.1.8.2/19Aug95-0530PM) id AA29064; Tue, 9 Apr 1996 11:56:09 -0400 Date: Tue, 9 Apr 1996 11:56:09 -0400 From: Garrett Wollman Message-Id: <9604091556.AA29064@halloran-eldar.lcs.mit.edu> To: joerg_wunsch@uriah.heep.sax.de (Joerg Wunsch) Cc: freebsd-current@FreeBSD.org (FreeBSD-current users) Subject: Re: routed delete my PPP default: how to fight it? In-Reply-To: <199604090736.JAA08067@uriah.heep.sax.de> References: <199604090621.XAA03064@silvia.HIP.Berkeley.EDU> <199604090736.JAA08067@uriah.heep.sax.de> Sender: owner-current@FreeBSD.org X-Loop: FreeBSD.org Precedence: bulk < said: >> Connection attempt to TCP 136.152.64.181:113 from 136.152.64.181:60781 >> Connection attempt to TCP 136.152.64.181:113 from 136.152.64.181:3818 > That's ``auth''. I've always wondered at my machine at work (where i > tcpdump all traffic that's going through the Internet router) who is > connecting to this port. It's also somehow related to sendmail. Note that there is a bug in the logging code in that it calls inet_ntoa() twice as an argument to printf() and expects it to return a different value... > Does anybody know more about ``auth''? It's a brain-damaged way of getting a string back from a remote machine which purports to represent the identity of the user who opened a particular connection. ``auth'' is a misnomer; it's officially called ``ident'', which isn't much better. >> Connection attempt to UDP 136.152.64.181:1647 from 136.152.64.181:53 > Looks like a reply for a DNS query, where the querying process has > been terminated before the answer arrived. Looks like a remote disk-filling service to me... -GAWollman -- Garrett A. Wollman | Shashish is simple, it's discreet, it's brief. ... wollman@lcs.mit.edu | Shashish is the bonding of hearts in spite of distance. Opinions not those of| It is a bond more powerful than absence. We like people MIT, LCS, ANA, or NSA| who like Shashish. - Claude McKenzie + Florent Vollant