Re: Filter logs

Robert Hanson (roberth@cet.com)
Sat, 19 Oct 1996 15:54:15 -0700 (PDT)

realistically their machine is 32 bit win and they have that protocol
active on their dialup interface. more often then not it is harmless
happening yet it depends on your site policy of course as to wether it is
a red flag or not eh?

--->
Robert H. Hanson Cutting Edge Communications, Inc. - blah,blah
Otis Orchards, Wa. Regional Commercial Internet Service Provider
(509) 927-9541 email: roberth@cet.com - http://www.cet.com/

On Sat, 19 Oct 1996, Dan Graupman wrote:

> On Sat, 19 Oct 1996, Robert Hanson wrote:
>
> > i believe the "3" is the statement number in the filter that is logging to
> > your machine.
> >
> > On Sat, 19 Oct 1996, Dan Graupman wrote:
> >
> > >
> > > My logs are filling up with these messages. It appears that someone
> > > is attempting to send NetBios name service requests through my network?
> > >
> > > Oct 19 08:19:49 gate1.elnet.com 3 deny: UDP from 168.87.6.235.137 to 130.252.100.69.137
> > > Oct 19 08:20:04 gate1.elnet.com last message repeated 10 times
> > >
> > > Can someone tell me what the "3" before the "deny" means?
> > >
> > > Is there anyway to tell which filter or port these messages are coming from?
> > >
> > > Thanks for any help.
> > >
>
> I thought the the 3 might refer to that, in which case it means that one
> of my dial-up customers is causing this. Now just to figure out which
> one, and why.
>
> Thanks.
>
>
> Dan Graupman
> Electro Link Network, Inc. graupman@elnet.com
> P.O. Box 711, 109B E. North St., Phone: 1-630-365-0807
> Elburn, IL 60119-0711 http://www.elnet.com
>