Re: security concern - ESX host repeatedly hitting external IP...

2010-09-16 Thread Jeff Steward
> *jra...@eaglemds.com* > *www.eaglemds.com > -- > > *From:* Andrew S. Baker [mailto:asbz...@gmail.com] > *Sent:* Thursday, September 16, 2010 12:43 PM > > *To:* NT System Admin Issues > *Subject:* Re: security concern - ESX host repeatedly hitting external > IP... > &g

RE: security concern - ESX host repeatedly hitting external IP...

2010-09-16 Thread John Aldrich
You could try disconnecting that router and see who screams. :-) Thanks, John Aldrich IT Manager, Blueridge Carpet 706-276-2001, Ext. 2233 From: Raper, Jonathan - Eagle [mailto:jra...@eaglemds.com] Sent: Thursday, September 16, 2010 11:23 AM To: NT System Admin Issues Subject: security conc

RE: security concern - ESX host repeatedly hitting external IP...

2010-09-16 Thread Raper, Jonathan - Eagle
__ From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Thursday, September 16, 2010 12:43 PM To: NT System Admin Issues Subject: Re: security concern - ESX host repeatedly hitting external IP... Sniff the traffic... :) ASB (My XeeSM Profile)<http://XeeSM.com/AndrewBaker> Exploiting Te

RE: security concern - ESX host repeatedly hitting external IP...

2010-09-16 Thread Ziots, Edward
+, Security + Network Engineer Lifespan Organization Email:ezi...@lifespan.org Cell:401-639-3505 From: Raper, Jonathan - Eagle [mailto:jra...@eaglemds.com] Sent: Thursday, September 16, 2010 11:49 AM To: NT System Admin Issues Subject: RE: security concern - ESX host repeatedly hitting external IP

Re: security concern - ESX host repeatedly hitting external IP...

2010-09-16 Thread Andrew S. Baker
Sniff the traffic... :) *ASB *(My XeeSM Profile) *Exploiting Technology for Business Advantage...* * * On Thu, Sep 16, 2010 at 11:22 AM, Raper, Jonathan - Eagle < jra...@eaglemds.com> wrote: > We’re getting ready to decommission an old router, and almost all of th

RE: security concern - ESX host repeatedly hitting external IP...

2010-09-16 Thread Andy Shook
Vmotion the guest OSes and shut it down... Shook From: Raper, Jonathan - Eagle [mailto:jra...@eaglemds.com] Sent: Thursday, September 16, 2010 11:49 AM To: NT System Admin Issues Subject: RE: security concern - ESX host repeatedly hitting external IP... I found that same info, but can't A

RE: security concern - ESX host repeatedly hitting external IP...

2010-09-16 Thread Garcia-Moran, Carlos
t the NTP config is to rule it out, Also the DNS settings, do you know the port being used? From: Raper, Jonathan - Eagle [mailto:jra...@eaglemds.com] Sent: Thursday, September 16, 2010 11:49 AM To: NT System Admin Issues Subject: RE: security concern - ESX host repeatedly hitting extern

RE: security concern - ESX host repeatedly hitting external IP...

2010-09-16 Thread Ziots, Edward
> 72.18.205.156 Name:mail.freerip.com Address: 72.18.205.156 That isnt pool.NTP.ORG block, which is commonly utilized in ESX environments to provide synced time to the ESX hosts and therefore its underlying ESX guests. You might need to see which ESX host its coming from and interrog

RE: security concern - ESX host repeatedly hitting external IP...

2010-09-16 Thread Garcia-Moran, Carlos
Looks like he has NTP setup to sync to an external resource, depending on what version of ESX he has , the setup should be somewhere here From: Raper, Jonathan - Eagle [mailto:jra...@eaglemds.com] Sent: Thursday, September 16, 2010 11:23 AM To: NT System Admin Issues Subject: security co