At 22:22 4-3-2002 +0100, you wrote:

Hi,

On Monday 04 March 2002 21:49, you wrote:

...

See quite a burst of traffic on my outside eth0 of UDP-packets on port 8. In my services file this is not mentioned. What can it be??

Are you sure it's UDP (proto 17), not ICMP (proto 1)?

Saw this in iptraf -s eth0. Shows UDP and TCP packets and portnumbers coming by. Trying to get snort now to sniff this if. What does it mean if it is ICMP?

...

TIA L1

Regards, Martin -- Martin Leweling Institut fuer Planetologie, WWU Muenster Wilhelm-Klemm-Str. 10, 48149 Muenster, Germany