IDLE TIMEOUT DEFEAT?

Leslie Bester (les@icenter.net)
Wed, 5 Jun 1996 12:39:50 -0500

I managed to find out what the (see below) data was about. I called the user and questioned him about it.
Seems he's running MIRC, and that data is just the server pings to make sure his client is still alive..

TCP from 205.200.13.34.1860 to 205.200.13.2.23 seq 241AEF7, ack 0x0, win 8192, SYN
TCP from 205.200.13.34.1860 to 205.200.13.2.23 seq 241AEF8, ack 0x55D00446, win 8616, ACK
TCP from 205.200.13.34.1860 to 205.200.13.2.23 seq 241AEF8, ack 0x55D00446, win 8616, FIN ACK
TCP from 205.200.13.34.1860 to 205.200.13.2.23 seq 241AEF9, ack 0x55D00446, win 0, RST
TCP from 205.200.13.34.1860 to 205.200.13.2.23 seq 241AEF9, ack 0x55D00446, win 0, RST

This sequence repeats every 60 seconds..
205.200.13.2 is my Radius/Web/Shell Account/Home-Dir server.. and 23 appears to be telnet. But this user is not logged in via telnet.

Les