Re: z/VM 6.1 - IBM Preview Letter..
Mike Walter wrote: snip For that matter, z/VM Version 6.1? What happened to Version 6.0? Doesn't everyone know that odd-numbered versions are considered unlucky? Can't have Version 6 Release 0 ... ya know? ...phsiii
TCPIP Gateway entry question
Hi list, we are having lots of trouble on defining a new type B IP address with subnetting under z/VM 4.4 Net Address: 172.24.131.160 Netmask: 255.255.255.224 = 27 mask bits Wildcard:0.0.0.31 Minimum IP address: 172.24.131.161 Maximum IP address: 172.24.131.190 Broadcast address: 172.24.131.191 Total IP number in network: 30 Our target machine is 172.124.131.188 But when applying Obeyfile We keep on constantly receiving error messages saying DTCPAR123I Line 104: Net address implies host routing, but HOST not specified That is, we must write the keyword HOST to avoid errors, but that's not what we want. Any help will be most welcome ! Thanks in advance, José Raúl Barón Dpto. Soporte e Implantación e-mail: jba...@calculo-sa.es P No imprima este e-mail si no es realmente necesario Do not print this e-mail unless really necessary.
Re: z/VM 6.1 - IBM Preview Letter..
If I remember the story correctly, you won't see a version such as 6.0, because in IBM wisdom, this would imply that there would be following releases (due to the decimal). Now why it's ok to have 6.1, and why that doesn't carry the same implication, I don't know. -- Robert P. Nix Mayo Foundation.~. RO-OE-5-55 200 First Street SW/V\ 507-284-0844 Rochester, MN 55905 /( )\ -^^-^^ In theory, theory and practice are the same, but in practice, theory and practice are different. On 7/8/09 6:50 AM, Phil Smith III li...@akphs.com wrote: Mike Walter wrote: snip For that matter, z/VM Version 6.1? What happened to Version 6.0? Doesn't everyone know that odd-numbered versions are considered unlucky? Can't have Version 6 Release 0 ... ya know? ...phsiii
PERFSVM question
We saw a bunch of logon attempts a night ago to userid ADMINIST which I do not have defined in the directory. There were about 2,500 over the course of 2 hours. They were apparently not coming in thru an emulator, so that pretty much leaves the web interface to Performance Toolkit. Is there any way I control that interface. How can I get the ip address? IBM used to have, internally, a mod that would double the amount of time between each unsuccessful logon attempt to a particular userid. Something like that would do the job. Jim -- Jim Bohnsack Cornell University (972) 596-6377 home/office (972) 342-5823 cell jab...@cornell.edu
Re: z/VM 6.1 - IBM Preview Letter..
IBM's use of V6.1 is shorthand for Version 6 Release 1. The first release of each version is necessarily Release 1. What IBM avoids (IIRC) is *Version* 1, as that implies a future version, presumably with substantial upgrades. On Wed, Jul 8, 2009 at 10:35 AM, RPN01 nix.rob...@mayo.edu wrote: If I remember the story correctly, you won't see a version such as 6.0, because in IBM wisdom, this would imply that there would be following releases (due to the decimal). Now why it's ok to have 6.1, and why that doesn't carry the same implication, I don't know. -- Robert P. Nix Mayo Foundation.~. RO-OE-5-55 200 First Street SW/V\ 507-284-0844 Rochester, MN 55905 /( )\ -^^-^^ In theory, theory and practice are the same, but in practice, theory and practice are different. On 7/8/09 6:50 AM, Phil Smith III li...@akphs.com wrote: Mike Walter wrote: snip For that matter, z/VM Version 6.1? What happened to Version 6.0? Doesn't everyone know that odd-numbered versions are considered unlucky? Can't have Version 6 Release 0 ... ya know? ...phsiii
Re: PERFSVM question
Jim Bohnsack wrote: We saw a bunch of logon attempts a night ago to userid ADMINIST which I do not have defined in the directory. There were about 2,500 over the course of 2 hours. They were apparently not coming in thru an emulator, so that pretty much leaves the web interface to Performance Toolkit. Is there any way I control that interface. How can I get the ip address? IBM used to have, internally, a mod that would double the amount of time between each unsuccessful logon attempt to a particular userid. Something like that would do the job. Jim Have you checked the console log of the PERFSVM service machine? -- Rich Smrcina Phone: 414-491-6001 http://www.linkedin.com/in/richsmrcina Catch the WAVV! http://www.wavv.org WAVV 2010
Re: z/VM 6.1 - IBM Preview Letter..
Ethan Lanz wrote: The first release of each version is necessarily Release 1. To people who learned programming from Rexx. To those of us who use assembler, Forth, C, Java, it would be Release 0 :) -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards.
Re: TCPIP Gateway entry question
On Wednesday, 07/08/2009 at 09:53 EDT, jose raul baron jba...@calculo-sa.es wrote: Hi list, we are having lots of trouble on defining a new type B IP addresswith subnetting under z/VM 4.4 Net Address: 172.24.131.160 Netmask: 255.255.255.224 = 27mask bits Wildcard:0.0.0.31 Minimum IP address: 172.24.131.161 Maximum IP address: 172.24.131.190 Broadcast address: 172.24.131.191 Total IP number in network: 30 Our target machine is 172.124.131.188 But when applying Obeyfile We keep on constantly receiving error messages saying DTCPAR123I Line 104: Net address implies host routing, but HOST not specified That is, we must write the keyword HOST to avoid errors, but that's not what we want. Any help will be most welcome ! You didn't post the content of your OBEYFILE, so I can't really tell what you're trying to do. Are you adding another adapter to VM TCP/IP? Trying tp ping 172.124.131.188 from 172.24.131.160 and it's failing? (Did you really mean 124?)What does ifconfig (or NETSTAT GATE) say? Alan Altmark z/VM Development IBM Endicott
Re: z/VM 6.1 - IBM Preview Letter..
Um - z/OS V1 R 1-10 to this point. On Wed, Jul 8, 2009 at 11:12 AM, Ethan Lanz llel...@gmail.com wrote: IBM's use of V6.1 is shorthand for Version 6 Release 1. The first release of each version is necessarily Release 1. What IBM avoids (IIRC) is *Version* 1, as that implies a future version, presumably with substantial upgrades. On Wed, Jul 8, 2009 at 10:35 AM, RPN01 nix.rob...@mayo.edu wrote: If I remember the story correctly, you won't see a version such as 6.0, because in IBM wisdom, this would imply that there would be following releases (due to the decimal). Now why it's ok to have 6.1, and why that doesn't carry the same implication, I don't know. -- Robert P. Nix Mayo Foundation.~. RO-OE-5-55 200 First Street SW/V\ 507-284-0844 Rochester, MN 55905 /( )\ -^^-^^ In theory, theory and practice are the same, but in practice, theory and practice are different. On 7/8/09 6:50 AM, Phil Smith III li...@akphs.com wrote: Mike Walter wrote: snip For that matter, z/VM Version 6.1? What happened to Version 6.0? Doesn't everyone know that odd-numbered versions are considered unlucky? Can't have Version 6 Release 0 ... ya know? ...phsiii -- Mark Pace Mainline Information Systems 1700 Summit Lake Drive Tallahassee, FL. 32317
Re: z/VM 6.1 - IBM Preview Letter..
Only if you are counting bits, bytes, words, etc., and then only if it is an offset you are counting. Who thought of using offset instead of ordinal numbers, anyway? Regards, Richard Schuh -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Jack Woehr Sent: Wednesday, July 08, 2009 8:17 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: z/VM 6.1 - IBM Preview Letter.. Ethan Lanz wrote: The first release of each version is necessarily Release 1. To people who learned programming from Rexx. To those of us who use assembler, Forth, C, Java, it would be Release 0 :) -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards.
Don India - Out of Office
I will be out of the office starting 07/08/2009 and will not return until 07/18/2009. I will be out of the office on July 8th returning July 19th. If your matter is urgent, please contact John Sutera at 913 535 5133 through Wednesday, July 15th and for the 16th and 17th contact Karin Broecker at 312 529 3837. I will be checking email during the evenings and voicemail less frequently.
Re: z/VM 6.1 - IBM Preview Letter..
Schuh, Richard wrote: Only if you are counting bits, bytes, words, etc., and then only if it is an offset you are counting. Who thought of using offset instead of ordinal numbers, anyway? The Almighty started on the zero'th day. After he did his work, the earth was without form and void, and the evening and subsequent morning were the first day, i.e., the first day wasn't complete until it was over! -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards.
Re: PERFSVM question
Simple answer: put a Linux guest in front of the VM TCP stack with the old address as the external address, renumber the VM stack to a RFC1918 address on an internal guest lan, and enable IP Masquerade in iptables. That gets you all sorts of useful info, and lets you shut them down cold. Add one of the IDS toolkits, and you can clobber the twerps network wide. -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Jim Bohnsack Sent: Wednesday, July 08, 2009 11:02 AM To: IBMVM@LISTSERV.UARK.EDU Subject: PERFSVM question We saw a bunch of logon attempts a night ago to userid ADMINIST which I do not have defined in the directory. There were about 2,500 over the course of 2 hours. They were apparently not coming in thru an emulator, so that pretty much leaves the web interface to Performance Toolkit. Is there any way I control that interface. How can I get the ip address? IBM used to have, internally, a mod that would double the amount of time between each unsuccessful logon attempt to a particular userid. Something like that would do the job. Jim -- Jim Bohnsack Cornell University (972) 596-6377 home/office (972) 342-5823 cell jab...@cornell.edu
Moderator intervention Re: [IBMVM] z/VM 6.1 - IBM Preview Letter..
Dearest colleagues: The ongoing discussion has, I think, served to prove what I have believed all along: That we are, each and every one of us, exceptionally clever, witty, well-read and profoundly insightful individuals. If you will forgive the interruption, may I humbly suggest that this thread is entirely past its Sell By date, and should be allowed to make a dignified exit from the stage? Your humble moderator, -dan. Misfortune, and recited misfortune especially, may be prolonged to that point where it ceases to excite pity and arouses only irritation. - Dorothy Parker
Re: PERFSVM question
Easy for you to say. Jim David Boyes wrote: Simple answer: put a Linux guest in front of the VM TCP stack with the old = address as the external address, renumber the VM stack to a RFC1918 address= on an internal guest lan, and enable IP Masquerade in iptables. That gets = you all sorts of useful info, and lets you shut them down cold. Add one of = the IDS toolkits, and you can clobber the twerps network wide.=20 -Original Message- From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On Behalf Of Jim Bohnsack Sent: Wednesday, July 08, 2009 11:02 AM To: IBMVM@LISTSERV.UARK.EDU Subject: PERFSVM question =20 We saw a bunch of logon attempts a night ago to userid ADMINIST which I do not have defined in the directory. There were about 2,500 over the course of 2 hours. They were apparently not coming in thru an emulator, so that pretty much leaves the web interface to Performance Toolkit. Is there any way I control that interface. How can I get the ip address? IBM used to have, internally, a mod that would double the amount of time between each unsuccessful logon attempt to a particular userid. Something like that would do the job. =20 Jim =20 -- Jim Bohnsack Cornell University (972) 596-6377 home/office (972) 342-5823 cell jab...@cornell.edu -- Jim Bohnsack Cornell University (972) 596-6377 home/office (972) 342-5823 cell jab...@cornell.edu
Re: PERFSVM question
On Jul 8, 2009, at 11:15 AM, David Boyes wrote: Simple answer: put a Linux guest in front of the VM TCP stack with the old address as the external address, renumber the VM stack to a RFC1918 address on an internal guest lan, and enable IP Masquerade in iptables. That gets you all sorts of useful info, and lets you shut them down cold. Add one of the IDS toolkits, and you can clobber the twerps network wide. -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Jim Bohnsack Sent: Wednesday, July 08, 2009 11:02 AM To: IBMVM@LISTSERV.UARK.EDU Subject: PERFSVM question We saw a bunch of logon attempts a night ago to userid ADMINIST which I do not have defined in the directory. There were about 2,500 over the course of 2 hours. They were apparently not coming in thru an emulator, so that pretty much leaves the web interface to Performance Toolkit. Is there any way I control that interface. How can I get the ip address? IBM used to have, internally, a mod that would double the amount of time between each unsuccessful logon attempt to a particular userid. Something like that would do the job. Are you running an FTP server? I saw an attack on a system using that userid (well, Administrator) coming in via FTP a few weeks ago. Adam
Re: PERFSVM question
On Jul 8, 2009, at 11:15 AM, David Boyes wrote: Simple answer: put a Linux guest in front of the VM TCP stack with the old address as the external address, renumber the VM stack to a RFC1918 address on an internal guest lan, and enable IP Masquerade in iptables. That gets you all sorts of useful info, and lets you shut them down cold. Add one of the IDS toolkits, and you can clobber the twerps network wide. -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Jim Bohnsack Sent: Wednesday, July 08, 2009 11:02 AM To: IBMVM@LISTSERV.UARK.EDU Subject: PERFSVM question We saw a bunch of logon attempts a night ago to userid ADMINIST which I do not have defined in the directory. There were about 2,500 over the course of 2 hours. They were apparently not coming in thru an emulator, so that pretty much leaves the web interface to Performance Toolkit. Is there any way I control that interface. How can I get the ip address? IBM used to have, internally, a mod that would double the amount of time between each unsuccessful logon attempt to a particular userid. Something like that would do the job. My FTP attacks were coming from somewhere inside Korea Telecom, if that's of any use to you. Adam
Re: z/VM 6.1 - IBM Preview Letter..
z/OS being the current poster child I can just see the rain-drenched vista of the Poughkeepsie IBM plant in the poster with a soaking wet z10 sitting on the lawn out front, with the word Give. in a big white square at the bottom of the poster. -- db
Re: PERFSVM question
I very cleverly log from 06:00 until 18:00. Saves space in the HISTLOG files, you know. :-[ Jim Rich Smrcina wrote: Jim Bohnsack wrote: We saw a bunch of logon attempts a night ago to userid ADMINIST which I do not have defined in the directory. There were about 2,500 over the course of 2 hours. They were apparently not coming in thru an emulator, so that pretty much leaves the web interface to Performance Toolkit. Is there any way I control that interface. How can I get the ip address? IBM used to have, internally, a mod that would double the amount of time between each unsuccessful logon attempt to a particular userid. Something like that would do the job. Jim Have you checked the console log of the PERFSVM service machine? -- Jim Bohnsack Cornell University (972) 596-6377 home/office (972) 342-5823 cell jab...@cornell.edu
Re: PERFSVM question
On Jul 8, 2009, at 12:03 PM, Jim Bohnsack wrote: Easy for you to say. How about She sells sea shells by the seashore? Adam
Re: z/VM 6.1 - IBM Preview Letter..
At which point it was released as Day 1! :) On Wed, Jul 8, 2009 at 11:54 AM, Jack Woehr j...@well.com wrote: Schuh, Richard wrote: Only if you are counting bits, bytes, words, etc., and then only if it is an offset you are counting. Who thought of using offset instead of ordinal numbers, anyway? The Almighty started on the zero'th day. After he did his work, the earth was without form and void, and the evening and subsequent morning were the first day, i.e., the first day wasn't complete until it was over! -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax http://www.well.com/%7Ejax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards.
Denny Refsnider is out of the office
I will be out of the office starting 07/08/2009 and will not return until 07/13/2009. Contact Les Geer in my absence at 607-429-3580 (T/L 620) or my manager, Nick Pianella (607-429-5343 (T/L 620). If an emergency, call my cell at 704-886-7039 if you need to reach me.
Re: z/VM 6.1 - IBM Preview Letter..
Ethan Lanz wrote: At which point it was released as Day 1! :) You win! -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards.
IBM DS6800 maintenance
Has anyone tried a non-IBM maintenance provider for one of the IBM DS disk subsystems? Are there companies that do this? Our 4 year warranty is up on our IBM DS6800. We are required to go out on bids, if it makes sense. It only makes sense, to spend the XX hours for the bid process, if there are competitors. Currently, we have 24X7 with the service uplift. i.e. When the DS6800 calls home, an IBM CE is dispatched. G Where the call-home feature can send a request to anyone, we are also concerned that another provider would have a remote support process available. We have had several problems in which the remote support team, got us back up and running. Thanks Tom Duerbusch THD Consulting
Re: PERFSVM question
Easy for you to say. Sent Jim a set of iptables rules that should do the job. Would anyone else find a VM-based screening/firewall virtual machine useful? Would you contribute time or money to it's creation? If so, let me know off-list and I'll see what we can coordinate. We've been running this way for years now, and it's a Really Nice Thing. -- db
Second moderator intervention Re: [IBMVM] z/VM 6.1 - IBM Preview Letter..
Ladies, gentlemen: Enough, please. In the immortal words of my father during long family road trips, please don't make me have to pull this car over to the side of the road! Pretty please? -dan.
Re: PERFSVM question
I've seen logon attacks thru FTPSERVE before and, as I remember, looking at the FTPSERVE console showed the activity. I've seen 3 different attempts in the last couple of weeks and the FTPSERVE console doesn't show a thing. Jim Adam Thornton wrote: On Jul 8, 2009, at 11:15 AM, David Boyes wrote: Simple answer: put a Linux guest in front of the VM TCP stack with the old address as the external address, renumber the VM stack to a RFC1918 address on an internal guest lan, and enable IP Masquerade in iptables. That gets you all sorts of useful info, and lets you shut them down cold. Add one of the IDS toolkits, and you can clobber the twerps network wide. -Original Message- From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On Behalf Of Jim Bohnsack Sent: Wednesday, July 08, 2009 11:02 AM To: IBMVM@LISTSERV.UARK.EDU Subject: PERFSVM question We saw a bunch of logon attempts a night ago to userid ADMINIST which I do not have defined in the directory. There were about 2,500 over the course of 2 hours. They were apparently not coming in thru an emulator, so that pretty much leaves the web interface to Performance Toolkit. Is there any way I control that interface. How can I get the ip address? IBM used to have, internally, a mod that would double the amount of time between each unsuccessful logon attempt to a particular userid. Something like that would do the job. Are you running an FTP server? I saw an attack on a system using that userid (well, "Administrator") coming in via FTP a few weeks ago. Adam -- Jim Bohnsack Cornell University (972) 596-6377 home/office (972) 342-5823 cell jab...@cornell.edu
Re: PERFSVM question
2,500 tries over 2 hours is not an attempt to break in, that's a denial-of-service attack. Apparently there was a pretty big DOS attack on a number of Federal and other websites starting on July 4. They hit a ton of sites, and if you stayed up, you did better than the Treasury Department, Secret Service, Federal Trade Commission and Transportation Department. http://www.google.com/hostednews/ap/article/ALeqM5icTKBW9_fm-oKDzns75BI-ykokSwD999UN580 -Chip- On 7/8/09 15:02 Jim Bohnsack said: We saw a bunch of logon attempts a night ago to userid ADMINIST which I do not have defined in the directory. There were about 2,500 over the course of 2 hours. They were apparently not coming in thru an emulator, so that pretty much leaves the web interface to Performance Toolkit. Is there any way I control that interface. How can I get the ip address? IBM used to have, internally, a mod that would double the amount of time between each unsuccessful logon attempt to a particular userid. Something like that would do the job. Jim
Re: PERFSVM question
Hello Everyone, There have been major attacks on South Korea and other government sites over the world. You may have been caught up in it. Ed Martin Aultman Health Foundation 330-363-5050 ext 35050 -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Chip Davis Sent: Wednesday, July 08, 2009 2:56 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: PERFSVM question 2,500 tries over 2 hours is not an attempt to break in, that's a denial-of-service attack. Apparently there was a pretty big DOS attack on a number of Federal and other websites starting on July 4. They hit a ton of sites, and if you stayed up, you did better than the Treasury Department, Secret Service, Federal Trade Commission and Transportation Department. http://www.google.com/hostednews/ap/article/ALeqM5icTKBW9_fm-oKDzns75BI- ykokSwD999UN580 -Chip- On 7/8/09 15:02 Jim Bohnsack said: We saw a bunch of logon attempts a night ago to userid ADMINIST which I do not have defined in the directory. There were about 2,500 over the course of 2 hours. They were apparently not coming in thru an emulator, so that pretty much leaves the web interface to Performance Toolkit. Is there any way I control that interface. How can I get the ip address? IBM used to have, internally, a mod that would double the amount of time between each unsuccessful logon attempt to a particular userid. Something like that would do the job. Jim
DFSMS/VM Minidisk Placement
When installing DFSMS/VM RMSONLY, where does one usually place the minidisks described in Chapter 5 of the Program Directory? On the system 5xxw01/5xxw02 or on an installation defined volume? Looking for help with best practices... Joseph Di Pippo Operating Systems Programmer III FRIT Computing Services Hardware Support 1-201-531-3820
Re: PERFSVM question
On 7/8/2009 at 2:55 PM, Chip Davis c...@aresti.com wrote: 2,500 tries over 2 hours is not an attempt to break in, that's a denial-of-service attack. One attempt every 3 seconds (roughly)? I doubt it. Sounds like a script kiddie to me. Mark Post
Re: DFSMS/VM Minidisk Placement
I place mine on one of the two mentioned disks in your posting. My reason is that we use DDR to backup the SYSRES packs (SYSRES packs, all disk drives needed for initial restore at our disaster recover site). I haven't looked at DFSMS in a while but some of the files MUST reside on the SFS (Shared File System, i.e. VMSERVS(VMSYS), VMSERVU(VMSYSU)). Steve From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of joe.dipi...@frit.frb.org Sent: Wednesday, July 08, 2009 5:04 PM To: IBMVM@LISTSERV.UARK.EDU Subject: DFSMS/VM Minidisk Placement When installing DFSMS/VM RMSONLY, where does one usually place the minidisks described in Chapter 5 of the Program Directory? On the system 5xxw01/5xxw02 or on an installation defined volume? Looking for help with best practices... Joseph Di Pippo Operating Systems Programmer III FRIT Computing Services Hardware Support 1-201-531-3820
Re: DFSMS/VM Minidisk Placement
I put the initial installation on the maintenance volumes (5xxW01, 5xxW02, etc) and then copy the necessary minidisks to my production volumes (VMxRES, VMxnnn, etc). On my system, the 5xxRES, 5xxWnn volumes belong to my maintenance system that I run second level. If I inherited an existing system using the 5xxRES/5xxWnn volumes as production, I would still place the DFSMS/VM minidisks on the 5xxWnn volumes because this is an IBM product and should go with the other IBM code. /Tom Kern joe.dipi...@frit.frb.org wrote: When installing DFSMS/VM RMSONLY, where does one usually place the minidisks described in Chapter 5 of the Program Directory? On the system 5xxw01/5xxw02 or on an installation defined volume? Looking for help with best practices... Joseph Di Pippo Operating Systems Programmer III FRIT Computing Services Hardware Support 1-201-531-3820
Re: PERFSVM question
Not if it's waiting on a response from the victim and immediately resending. That's harder to automatically recognize and guard against. A PING flood, otoh... Besides, it wasn't clear that the attack was sustained or in spurts, which could have raise the effective frequency. -Chip- On 7/8/09 22:08 Mark Post said: On 7/8/2009 at 2:55 PM, Chip Davis c...@aresti.com wrote: 2,500 tries over 2 hours is not an attempt to break in, that's a denial-of-service attack. One attempt every 3 seconds (roughly)? I doubt it. Sounds like a script kiddie to me. Mark Post
