use the form netstat -ln and resend those first two lines (it they still list) "hackermagnet" is connected to port 1031 (a BBN port), but port 1026 doesn't seem registered: cs7.msg.yahoo.com could be a server at yahoo, but I don't know what it would be doing without the IP affresses, I don't know anything to do to track these hosts down. the command above will tell netstat not to resolve names, and give their IP addresses instead. --Greg ----- Original Message ----- From: "TiGereYe" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> > hi, > > I have a question...i have included an attachment of the log i get when i do > "netstat" the thing that bothers me is the first forgein address... well and > the second one too..........could someone please help me to interpret these > logs?...and if the machine is comprimised? > > Thanks > > TiGereYe - Accept No Substitutes - > -------------------------------------------------------------------------- --- > Dont Start Racin Or I will Start Racin...Bets On That You'll Be Disgracin. > > ______________________________________________ > FREE Personalized Email at Mail.com > Sign up at http://www.mail.com/?sr=signup ______________________________________________________________________________ Vous avez un site perso ? 2 millions de francs à gagner sur i(france) ! Webmasters : ZE CONCOURS ! http://www.ifrance.com/_reloc/concours.emailif