Re: promiscuous eth0

2001-03-04 Thread Jaan Sarv
> Also, paranoid network administrators might be a little upset by it, since > Linux sends out a frame indicating it is switching into (or out > of) promiscuous mode. This is possible evidence that you're running a > sniffer of some kind (such as snort). Hi, How can I recognize such frames/packe

Re: Interpreting error logs??? (source Quench)

2001-03-04 Thread Tom Marshall
Quoting from "TCP/IP Illustrated, Volume 1", section 11.11: This is an error that may be generated by a system (router or host) when it receives datagrams of a rate that is too fast to be processed. Note the qualifier "May." A system is not required to send a source quench, even if it ru

Re: Mini-DoS-Attack?

2001-03-04 Thread Alvin Oga
hi mh do you see any incoming "icmp requests" ?? that is broadcasting to your entire or portions of your subnet ?? what does tcpdum show ??? root# tcpdump | grep icmp - the actual sites they may be after is the ip# you are seeing... and they just using your pc to send the p

Interpreting error logs??? (source Quench)

2001-03-04 Thread Steve Rudd
Interpreting error logs: I get all kinds of unusual error messages in my log like this one: Sun Mar 4 13:17:59 source quench from 216-146-142-4.bwn.net [216.146.142.4] What is a "source Quench"? And should I be concerned about it. Where can I go to read about all the error messages in the log

Re: Interpreting error logs??? (source Quench)

2001-03-04 Thread Tom Marshall
Quoting from "TCP/IP Illustrated, Volume 1", section 11.11: This is an error that may be generated by a system (router or host) when it receives datagrams of a rate that is too fast to be processed. Note the qualifier "May." A system is not required to send a source quench, even if it r

Re: Mini-DoS-Attack?

2001-03-04 Thread Alvin Oga
hi mh do you see any incoming "icmp requests" ?? that is broadcasting to your entire or portions of your subnet ?? what does tcpdum show ??? root# tcpdump | grep icmp - the actual sites they may be after is the ip# you are seeing... and they just using your pc to send the

Interpreting error logs??? (source Quench)

2001-03-04 Thread Steve Rudd
Interpreting error logs: I get all kinds of unusual error messages in my log like this one: Sun Mar 4 13:17:59 source quench from 216-146-142-4.bwn.net [216.146.142.4] What is a "source Quench"? And should I be concerned about it. Where can I go to read about all the error messages in the log

Mini-DoS-Attack?

2001-03-04 Thread MH
I noticed unusual and apparently coordinated ping activity from about a dozen of hosts against my box, when I inspected my logs[1] this morning. I'm not especially worried about this regarding my own box (doesn't seem to be very efficient...) , but could this be a hint, that some of those boxes ar

Re: pptp with mschap

2001-03-04 Thread John Ferlito
On Sun, Mar 04, 2001 at 11:55:26AM +0100, Rene Mayrhofer wrote: > John Ferlito wrote: > > I'll probably release a ppp-mppe package that is an alternative > > to ppp. The problem I was having was how to deal with packages that > > depend on ppp. I think I can get around this by usung the laternative

Re: pptp with mschap

2001-03-04 Thread John Ferlito
On Sun, Mar 04, 2001 at 11:47:05AM +0100, Rene Mayrhofer wrote: > John Ferlito wrote: > Please make the packages conflict (and ppp-mppe should Provide: ppp) > since it seems to make no sense having both installed. The ppp-mppe > package should provide everything the normal ppp package does, but wit

Re: pptp with mschap

2001-03-04 Thread Rene Mayrhofer
John Ferlito wrote: > I'll probably release a ppp-mppe package that is an alternative > to ppp. The problem I was having was how to deal with packages that > depend on ppp. I think I can get around this by usung the laternatives > stuff rather than making the packages conflict. > > I inten

Re: pptp with mschap

2001-03-04 Thread Rene Mayrhofer
John Ferlito wrote: > > On Sat, Mar 03, 2001 at 12:36:58PM -0500, Bao C. Ha wrote: > > It belongs to pppd. I am not sure if the Debian pppd package > > has included the patch to support them or not. MSCHAP support is in, MPPE is not. > It doesn't at the moment but I've got some packages

Mini-DoS-Attack?

2001-03-04 Thread MH
I noticed unusual and apparently coordinated ping activity from about a dozen of hosts against my box, when I inspected my logs[1] this morning. I'm not especially worried about this regarding my own box (doesn't seem to be very efficient...) , but could this be a hint, that some of those boxes a

Re: pptp with mschap

2001-03-04 Thread John Ferlito
On Sun, Mar 04, 2001 at 11:55:26AM +0100, Rene Mayrhofer wrote: > John Ferlito wrote: > > I'll probably release a ppp-mppe package that is an alternative > > to ppp. The problem I was having was how to deal with packages that > > depend on ppp. I think I can get around this by usung the laternativ

Re: pptp with mschap

2001-03-04 Thread John Ferlito
On Sun, Mar 04, 2001 at 11:47:05AM +0100, Rene Mayrhofer wrote: > John Ferlito wrote: > Please make the packages conflict (and ppp-mppe should Provide: ppp) > since it seems to make no sense having both installed. The ppp-mppe > package should provide everything the normal ppp package does, but wi

Re: pptp with mschap

2001-03-04 Thread Rene Mayrhofer
John Ferlito wrote: > I'll probably release a ppp-mppe package that is an alternative > to ppp. The problem I was having was how to deal with packages that > depend on ppp. I think I can get around this by usung the laternatives > stuff rather than making the packages conflict. > > I inte

Re: pptp with mschap

2001-03-04 Thread Rene Mayrhofer
John Ferlito wrote: > > On Sat, Mar 03, 2001 at 12:36:58PM -0500, Bao C. Ha wrote: > > It belongs to pppd. I am not sure if the Debian pppd package > > has included the patch to support them or not. MSCHAP support is in, MPPE is not. > It doesn't at the moment but I've got some package