Re: Connections suddenly increase

From: Jan Schloessin (jschloes_at_rz.uni-potsdam.de)
Date: 10/19/04


Date: Tue, 19 Oct 2004 10:33:18 +0200

moritz gartenmeister wrote:
> I run a Linux Bridge and run a script, which reads every minute
> /proc/sys/net/ipv4/netfilter/ip_conntrack_count and puts this number
> in a file.

I don't have this file (run kernel 2.6), so I only guess:

> I think about a virus, bot, worm etc. But I am not sure about it. I
> have no rational explanation, why normal use of Internet would give
> such data.
>
> BTW: This connections are from a students dorm with about 500
> students/computers.
>
> Can anyone give me some light?

I think it it counts the connection via lo (loopdevice) too. So there
are many even without an internet outbound.

jan



Relevant Pages

  • Connections suddenly increase
    ... Now I have some 'strange' data: ... A really fast decrease of connections. ... This connections are from a students dorm with about 500 ...
    (comp.security.misc)
  • Re: Connections suddenly increase
    ... >A really fast decrease of connections. ... >I think about a virus, bot, worm etc. ... This connections are from a students dorm with about 500 ...
    (comp.security.misc)