Re: Connections suddenly increase
From: Jan Schloessin (jschloes_at_rz.uni-potsdam.de)
Date: 10/19/04
- Next message: Jan Schloessin: "Why can I read encrypted Mails?"
- Previous message: Barry Margolin: "Re: How does the new anti spam SPF work regarding the senders email address ?"
- Next in thread: chris_at_nospam.com: "Re: Connections suddenly increase"
- Maybe reply: chris_at_nospam.com: "Re: Connections suddenly increase"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 19 Oct 2004 10:33:18 +0200
moritz gartenmeister wrote:
> I run a Linux Bridge and run a script, which reads every minute
> /proc/sys/net/ipv4/netfilter/ip_conntrack_count and puts this number
> in a file.
I don't have this file (run kernel 2.6), so I only guess:
> I think about a virus, bot, worm etc. But I am not sure about it. I
> have no rational explanation, why normal use of Internet would give
> such data.
>
> BTW: This connections are from a students dorm with about 500
> students/computers.
>
> Can anyone give me some light?
I think it it counts the connection via lo (loopdevice) too. So there
are many even without an internet outbound.
jan
- Next message: Jan Schloessin: "Why can I read encrypted Mails?"
- Previous message: Barry Margolin: "Re: How does the new anti spam SPF work regarding the senders email address ?"
- Next in thread: chris_at_nospam.com: "Re: Connections suddenly increase"
- Maybe reply: chris_at_nospam.com: "Re: Connections suddenly increase"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|