X-PMC-CI-e-mail-id: 11601 


>It looks like a snmp query.  Most likely, there are people in the US and 
>New Zealand who were wondering if you were running snmpd and if your 
>community string was public.  I remember that Sun had a bug in their snmpd 
>about a year ago but I'm not sure if it is related.
>
>-- Joe

Thank you to Joe and all others who sent private e-mails (too numerous
to list here) to remind me that port 161 probe is SNMP probe.

(I should have checked the modern /etc/services on the solaris 2.x
boxes before posting.  I checked the old /etc/services file on sunos
4.1.4 box and didn't find 161 there.)

I will modify the log summary generator to mark these probes
as SNMP probes.

Also, I wondered how people learned the owners of the net are in US
and New Zealand. Then, I found a search engine called 
"WHOIS" at 

        http://www.geektools.com/cgi-bin/whois.cgi

"dig -x" against the recorded addresses didn't produce anything
useful, but the above search engine did. I learned one more thing.


Thank you all. 


-- 
     Ishikawa, Chiaki        [EMAIL PROTECTED]  or         
 (family name, given name) [EMAIL PROTECTED]
    Personal Media Corp.      ** Remove .NoSpam at the end before use **     
  Shinagawa, Tokyo, Japan 142-0051


-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to