RE: IDLE USER Defeat Program?

Leslie Bester (les@icenter.net)
Tue, 4 Jun 1996 12:04:56 -0500

Messages sorted by: [ date ][ thread ][ subject ][ author ]
Next message: Jon Gefaell: "Re: 5-BRI fails intermittently"
Previous message: alex: "Re: 5-BRI fails intermittently"

OK, I decided to read the manual and created a filter to watch this guys traffic, here is what I got.. WHAT DOES THIS MEAN?!

TCP from 205.200.13.34.1860 to 205.200.13.2.23 seq 241AEF7, ack 0x0, win 8192, SYN
TCP from 205.200.13.34.1860 to 205.200.13.2.23 seq 241AEF8, ack 0x55D00446, win 8616, ACK
TCP from 205.200.13.34.1860 to 205.200.13.2.23 seq 241AEF8, ack 0x55D00446, win 8616, FIN ACK
TCP from 205.200.13.34.1860 to 205.200.13.2.23 seq 241AEF9, ack 0x55D00446, win 0, RST
TCP from 205.200.13.34.1860 to 205.200.13.2.23 seq 241AEF9, ack 0x55D00446, win 0, RST

This sequence repeats every 60 seconds..
205.200.13.2 is my Radius/Web/Shell Account/Home-Dir server.. and 23 appears to be telnet. But this user is not logged in via telnet.
Any suggestions as to what this guy is doing?
Les

Next message: Jon Gefaell: "Re: 5-BRI fails intermittently"
Previous message: alex: "Re: 5-BRI fails intermittently"