GNAT Box Pro Version: 3.1.3s / Intel P166 MMX 64mb ram

2002-04-13 02:52:05 FILTER: Remote access filter blocks: TCP ed0
[68.53.39.178/197]->[65.187.137.49/6346] l=4294967280 f=0x4f.


Just happened to notice this while working on something else. I was
about to ignore it and move on when it struck me that the length is in
bytes and didn't recognize the flag. Looks like rst, but what is the
meaning of the f? I've seen a few of these from different addresses,
possible by-product of the gnutella or something else?


2002-04-13 08:26:15 FILTER: Remote access filter accepts : ICMP ed0
[64.108.198.142/8]->[65.187.137.49/8] l=4 f=0x0.
2002-04-13 08:25:45 FILTER: Remote access filter accepts : ICMP ed0
[64.108.198.142/8]->[65.187.137.49/8] l=4 f=0x0.
2002-04-13 08:25:27 FILTER: Remote access filter accepts : ICMP ed0
[64.108.198.142/8]->[65.187.137.49/8] l=4 f=0x0.


I have over an hour of these, and still going. The remote address is
running morpheus, having not ran morpheus I am unsure as to it's
default config and if this is normal. Though that is the only address
and there are a large number of others using morpheus that do not
exhibit this behaviour. The number of packets is not enough to justify
any type of response on my part, I just thought it strange. Any
thoughts, comments on this activity?


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
To subscribe to the digest version first unsubscribe, then
 e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Archive of the last 1000 messages:
 http://www.mail-archive.com/[email protected]

Reply via email to