Mailinglist Archive: opensuse-security (636 mails)

< Previous Next >
AW: AW: [suse-security] compromised?
  • From: "Stiefenhofer, Marek ECOFIS" <m.stiefenhofer@xxxxxxxxx>
  • Date: Mon, 12 Feb 2001 09:38:37 +0100
  • Message-id: <5F4F3628E7EFD411AA570090270F781406C2C3@xxxxxxxxxxxxxx>
> Of course only the SYN flag was set. ALL connection attempts start with a
SYN
> packet and you will never see anything more in firewall logs if you are
> infact blocking
> the connection from taking place. The only time you will see more than a
> SYN packet

This is exactly what I said. The logs don't indicate the use of any service
(gnutella etc.) but a trojan port scan.

< Previous Next >
This Thread
  • No further messages