"Mark E. Drummond" wrote:
>
Talked to the owner of that IP. Seems completely ignorant of the issue.
He was on his machine at the time of the detect (running from ~9AM till
~11AM) but was just doing some programming. Nothing network related.
UDP and TCP scans of his machine turn up nothing.
My attempt to ID his OS was trashed because he is running ZoneAlarm.
The "padding" in each packet were 0x20 ... ASCII space I believe.
I can post some sample packets if anyone is interested.
--
Mark Drummond|ICQ#19153754|mailto:[EMAIL PROTECTED]
UNIX System Administrator|Royal Military College of Canada
The Kingston Linux Users Group|http://signals.rmc.ca/klug/
Saving the World ... One CPU at a Time
Please excuse me if I am terse. I answer dozens of emails every day.
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
