From owner-freebsd-isp Tue Apr 24 12:32:41 2001 Delivered-To: freebsd-isp@freebsd.org Received: from aspenworks.com (aspenworks.com [192.94.236.1]) by hub.freebsd.org (Postfix) with ESMTP id 6383837B422 for ; Tue, 24 Apr 2001 12:32:38 -0700 (PDT) (envelope-from alex@aspenworks.com) Received: from ibmxeon (matrix.aspenworks.com [216.38.199.82]) by aspenworks.com (8.9.3/8.9.3) with SMTP id NAA43750 for ; Tue, 24 Apr 2001 13:32:35 -0600 (MDT) (envelope-from alex@aspenworks.com) Message-ID: <006301c0ccf5$4a5e4600$c800a8c0@aspenworks.com> From: "alex huppenthal" To: "free" Subject: IPFW ? hacked? Date: Tue, 24 Apr 2001 13:32:21 -0600 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4133.2400 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I setup a pipe - number 5, and set the bandwidth to 20Mbits. Interestingly, I see 205.149.189.91 as a destination IP address at port 5999 collecting data from x.x.18.3 I don't know 205.149.189.91 or have any process running to that site. However, the numbers are increasing. Anyone seen this behavior? 00005: 20.000 Mbit/s 0 ms 50 sl. 1 queues (1 buckets) droptail mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 0 tcp x.x.18.3/1027 205.149.189.91/5999 76043 19344253 0 0 0 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message