The same is true of so-called "security" administrators. They often
create security problems to show that their jobs are important.
So, last night I made a so-called security-administrator angry
(-erm to say the least). So today he's hacking my system.
So I had to turn off portmap for a few days until his hissy-fit
is over. I never did like that Sun-Trojan anyway.
The following log will show a systemic problem, however. The attacker
was able to kill ksyslog and klogd. If it had not been for 'other means'
it would have been difficult to observe the attacker.
Note that all the 'from' addresses are legit local addresses. This
is a typical log of a system under attack. No "stack patches" will
help you here.
Dec 28 11:04:41 chaos bootpd[123]: bad addr len from from Ethernet address 52:41:53:20:70:7C
Dec 28 11:04:41 chaos last message repeated 2 times
Dec 28 13:10:25 chaos kernel: Kernel logging (ksyslog) stopped.
Dec 28 13:10:25 chaos kernel: Kernel log daemon terminating.
Dec 28 13:10:25 chaos inetd[65]: /usr/etc/bootpd: exit signal 0x2
Dec 28 13:10:30 chaos portmap[2442]: connect from 204.178.42.54 to callit(pcnfsd)
Dec 28 13:10:34 chaos portmap[2444]: connect from 204.178.41.246 to callit(pcnfsd)
Dec 28 13:10:42 chaos portmap[2446]: connect from 204.178.44.179 to callit(pcnfsd)
Dec 28 13:10:48 chaos portmap[2448]: connect from 204.178.41.168 to callit(mountd)
Dec 28 13:10:49 chaos portmap[2450]: connect from 204.178.41.246 to callit(pcnfsd)
Dec 28 13:10:57 chaos portmap[2453]: connect from 204.178.44.179 to callit(pcnfsd)
Dec 28 13:11:04 chaos portmap[2456]: connect from 204.178.41.246 to callit(pcnfsd)
Dec 28 13:11:12 chaos portmap[2459]: connect from 204.178.44.179 to callit(pcnfsd)
Dec 28 13:11:13 chaos portmap[2461]: connect from 204.178.40.31 to callit(mountd)
Dec 28 13:11:22 chaos portmap[2463]: connect from 204.178.47.198 to callit(mountd)
Dec 28 13:11:31 chaos portmap[2517]: connect from 204.178.41.168 to callit(mountd)
Dec 28 13:11:38 chaos portmap[2638]: connect from 204.178.40.31 to callit(mountd)
Dec 28 13:11:42 chaos portmap[2690]: connect from 204.178.47.198 to callit(mountd)
Dec 28 13:12:01 chaos portmap[2788]: connect from 204.178.40.31 to callit(mountd)
Dec 28 13:12:02 chaos portmap[2790]: connect from 204.178.41.168 to callit(mountd)
Dec 28 13:12:02 chaos portmap[2792]: connect from 204.178.47.198 to callit(mountd)
Dec 28 13:12:02 chaos portmap[2795]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:12:02 chaos portmap[2796]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:12:22 chaos portmap[2799]: connect from 204.178.47.198 to callit(pcnfsd)
Dec 28 13:12:26 chaos portmap[2802]: connect from 204.178.40.31 to callit(pcnfsd)
Dec 28 13:12:35 chaos portmap[2805]: connect from 204.178.41.168 to callit(pcnfsd)
Dec 28 13:12:37 chaos portmap[2807]: connect from 204.178.47.198 to callit(pcnfsd)
Dec 28 13:12:41 chaos portmap[2809]: connect from 204.178.40.31 to callit(pcnfsd)
Dec 28 13:12:52 chaos portmap[2812]: connect from 204.178.47.198 to callit(pcnfsd)
Dec 28 13:12:56 chaos portmap[2845]: connect from 204.178.41.168 to callit(pcnfsd)
Dec 28 13:12:56 chaos portmap[2847]: connect from 204.178.40.31 to callit(pcnfsd)
Dec 28 13:13:13 chaos portmap[2851]: connect from 204.178.41.168 to callit(pcnfsd)
Dec 28 13:17:44 chaos portmap[2855]: connect from 204.178.46.58 to callit(mountd)
Dec 28 13:17:54 chaos portmap[2857]: connect from 204.178.42.202 to callit(mountd)
Dec 28 13:18:04 chaos portmap[2859]: connect from 204.178.46.58 to callit(mountd)
Dec 28 13:18:14 chaos portmap[2861]: connect from 204.178.42.202 to callit(mountd)
Dec 28 13:18:24 chaos portmap[2863]: connect from 204.178.46.58 to callit(mountd)
Dec 28 13:18:35 chaos portmap[2865]: connect from 204.178.42.202 to callit(mountd)
Dec 28 13:18:44 chaos portmap[2867]: connect from 204.178.46.58 to callit(pcnfsd)
Dec 28 13:18:56 chaos portmap[2869]: connect from 204.178.42.202 to callit(pcnfsd)
Dec 28 13:18:56 chaos portmap[2873]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:18:56 chaos portmap[2871]: connect from 204.178.40.144 to callit(300214)
Dec 28 13:18:56 chaos portmap[2872]: connect from 204.178.40.144 to callit(300214)
Dec 28 13:18:56 chaos portmap[2875]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:18:56 chaos portmap[2874]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:18:56 chaos portmap[2876]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:19:00 chaos portmap[2877]: connect from 204.178.40.144 to callit(300214)
Dec 28 13:19:00 chaos portmap[2878]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:19:00 chaos portmap[2879]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:19:00 chaos portmap[2881]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:19:00 chaos portmap[2880]: connect from 204.178.40.144 to callit(300214)
Dec 28 13:19:00 chaos portmap[2882]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:19:00 chaos portmap[2883]: connect from 204.178.46.58 to callit(pcnfsd)
Dec 28 13:19:04 chaos portmap[2885]: connect from 204.178.40.144 to callit(300214)
Dec 28 13:19:04 chaos portmap[2886]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:19:04 chaos portmap[2887]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:19:04 chaos portmap[2889]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:19:04 chaos portmap[2888]: connect from 204.178.40.144 to callit(300214)
Dec 28 13:19:04 chaos portmap[2890]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:19:11 chaos portmap[2891]: connect from 204.178.42.202 to callit(pcnfsd)
Dec 28 13:19:15 chaos portmap[2893]: connect from 204.178.46.58 to callit(pcnfsd)
Dec 28 13:19:26 chaos portmap[2895]: connect from 204.178.42.202 to callit(pcnfsd)
Dec 28 13:19:28 chaos portmap[2897]: connect from 204.178.40.144 to callit(300214)
Dec 28 13:19:28 chaos portmap[2898]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:19:28 chaos portmap[2899]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:19:28 chaos portmap[2901]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:19:28 chaos portmap[2900]: connect from 204.178.40.144 to callit(300214)
Dec 28 13:19:28 chaos portmap[2902]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:19:32 chaos portmap[2904]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:19:32 chaos portmap[2903]: connect from 204.178.40.144 to callit(300214)
Dec 28 13:19:32 chaos portmap[2905]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:19:32 chaos portmap[2907]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:19:32 chaos portmap[2906]: connect from 204.178.40.144 to callit(300214)
Dec 28 13:19:32 chaos portmap[2908]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:19:36 chaos portmap[2909]: connect from 204.178.40.144 to callit(300214)
Dec 28 13:19:36 chaos portmap[2910]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:19:36 chaos portmap[2911]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:19:36 chaos portmap[2913]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:19:36 chaos portmap[2912]: connect from 204.178.40.144 to callit(300214)
Dec 28 13:19:36 chaos portmap[2914]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:21:02 chaos portmap[2915]: connect from 204.178.44.60 to callit(mountd)
Dec 28 13:21:21 chaos portmap[2917]: connect from 204.178.44.60 to callit(mountd)
Dec 28 13:21:41 chaos portmap[2919]: connect from 204.178.44.60 to callit(mountd)
Dec 28 13:22:03 chaos portmap[2921]: connect from 204.178.44.60 to callit(pcnfsd)
Dec 28 13:22:18 chaos portmap[2923]: connect from 204.178.44.60 to callit(pcnfsd)
Dec 28 13:22:33 chaos portmap[2925]: connect from 204.178.44.60 to callit(pcnfsd)
Dec 28 13:23:03 chaos portmap[2929]: connect from 204.178.46.152 to callit(mountd)
Dec 28 13:23:08 chaos portmap[2933]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:23:08 chaos portmap[2934]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:23:23 chaos portmap[2938]: connect from 204.178.46.152 to callit(mountd)
Dec 28 13:23:42 chaos portmap[2940]: connect from 204.178.46.152 to callit(mountd)
Dec 28 13:24:02 chaos portmap[2942]: connect from 204.178.46.152 to callit(pcnfsd)
Dec 28 13:24:17 chaos portmap[2946]: connect from 204.178.46.152 to callit(pcnfsd)
Dec 28 13:24:32 chaos portmap[2949]: connect from 204.178.46.152 to callit(pcnfsd)
Dec 28 13:26:26 chaos portmap[2955]: connect from 204.178.47.24 to callit(mountd)
Dec 28 13:26:46 chaos portmap[2957]: connect from 204.178.47.24 to callit(mountd)
Dec 28 13:27:07 chaos portmap[2959]: connect from 204.178.47.24 to callit(mountd)
Dec 28 13:27:29 chaos portmap[2961]: connect from 204.178.47.24 to callit(pcnfsd)
Dec 28 13:27:38 chaos portmap[2963]: connect from 204.178.47.192 to callit(mountd)
Dec 28 13:27:44 chaos portmap[2965]: connect from 204.178.47.24 to callit(pcnfsd)
Dec 28 13:27:59 chaos portmap[2967]: connect from 204.178.47.24 to callit(pcnfsd)
Dec 28 13:28:00 chaos portmap[2969]: connect from 204.178.47.192 to callit(mountd)
Dec 28 13:28:20 chaos portmap[2971]: connect from 204.178.47.192 to callit(mountd)
Dec 28 13:28:24 chaos portmap[2973]: connect from 204.178.40.65 to callit(mountd)
Dec 28 13:28:41 chaos portmap[2975]: connect from 204.178.47.192 to callit(pcnfsd)
Dec 28 13:28:44 chaos portmap[2977]: connect from 204.178.40.65 to callit(mountd)
Dec 28 13:28:56 chaos portmap[2979]: connect from 204.178.47.192 to callit(pcnfsd)
Dec 28 13:29:05 chaos portmap[2983]: connect from 204.178.40.65 to callit(mountd)
Dec 28 13:29:08 chaos sendmail[2982]: NAA02982: from=<owner-linux-kernel-outgoing@vger.rutgers.edu>, size=3407, class=-60, pri=141407, nrcpts=1, msgid=<000501bf5161$29940fb0$021d85d1@youwant.to>, bodytype=8BITMIME, proto=ESMTP, relay=nic.funet.fi [193.166
.0.145]
Dec 28 13:29:08 chaos portmap[2986]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:29:08 chaos portmap[2987]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:29:09 chaos sendmail[2985]: NAA02982: to=<root@chaos.analogic.com>, delay=00:00:06, xdelay=00:00:01, mailer=local, stat=Sent
Dec 28 13:29:11 chaos portmap[2989]: connect from 204.178.47.192 to callit(pcnfsd)
Dec 28 13:29:16 chaos portmap[2991]: connect from 204.178.46.111 to callit(mountd)
Dec 28 13:29:25 chaos portmap[2993]: connect from 204.178.40.65 to callit(pcnfsd)
Dec 28 13:29:35 chaos portmap[2995]: connect from 204.178.46.111 to callit(mountd)
Dec 28 13:29:40 chaos portmap[2997]: connect from 204.178.40.65 to callit(pcnfsd)
Dec 28 13:29:55 chaos portmap[2999]: connect from 204.178.40.65 to callit(pcnfsd)
Dec 28 13:29:55 chaos portmap[3001]: connect from 204.178.46.111 to callit(mountd)
Dec 28 13:30:05 chaos portmap[3003]: connect from 204.178.46.86 to callit(mountd)
Dec 28 13:30:20 chaos portmap[3005]: connect from 204.178.46.111 to callit(pcnfsd)
Dec 28 13:30:24 chaos portmap[3007]: connect from 204.178.46.86 to callit(mountd)
Dec 28 13:30:27 chaos portmap[3009]: connect from 204.178.41.7 to callit(mountd)
Dec 28 13:30:35 chaos portmap[3011]: connect from 204.178.46.111 to callit(pcnfsd)
Dec 28 13:30:44 chaos portmap[3013]: connect from 204.178.46.86 to callit(mountd)
Dec 28 13:30:47 chaos portmap[3015]: connect from 204.178.41.7 to callit(mountd)
Dec 28 13:30:50 chaos portmap[3017]: connect from 204.178.46.111 to callit(pcnfsd)
Dec 28 13:31:04 chaos portmap[3019]: connect from 204.178.46.86 to callit(pcnfsd)
Dec 28 13:31:07 chaos portmap[3021]: connect from 204.178.41.7 to callit(mountd)
Dec 28 13:31:19 chaos portmap[3023]: connect from 204.178.46.86 to callit(pcnfsd)
Dec 28 13:31:29 chaos portmap[3025]: connect from 204.178.41.7 to callit(pcnfsd)
Dec 28 13:31:34 chaos portmap[3027]: connect from 204.178.46.86 to callit(pcnfsd)
Dec 28 13:31:44 chaos portmap[3029]: connect from 204.178.41.7 to callit(pcnfsd)
Dec 28 13:31:59 chaos portmap[3031]: connect from 204.178.41.7 to callit(pcnfsd)
Dec 28 13:32:20 chaos portmap[3033]: connect from 204.178.47.32 to callit(mountd)
Dec 28 13:32:25 chaos portmap[3035]: connect from 204.178.46.154 to callit(mountd)
Dec 28 13:32:40 chaos portmap[3037]: connect from 204.178.47.32 to callit(mountd)
Dec 28 13:32:40 chaos portmap[3039]: connect from 204.178.47.180 to callit(mountd)
Dec 28 13:32:45 chaos portmap[3041]: connect from 204.178.46.154 to callit(mountd)
Dec 28 13:33:00 chaos portmap[3043]: connect from 204.178.47.32 to callit(mountd)
Dec 28 13:33:00 chaos portmap[3045]: connect from 204.178.47.180 to callit(mountd)
Dec 28 13:33:07 chaos portmap[3047]: connect from 204.178.46.154 to callit(mountd)
Dec 28 13:33:19 chaos portmap[3049]: connect from 204.178.47.32 to callit(pcnfsd)
Dec 28 13:33:20 chaos portmap[3051]: connect from 204.178.47.180 to callit(mountd)
Dec 28 13:33:26 chaos portmap[3053]: connect from 204.178.46.154 to callit(pcnfsd)
Dec 28 13:33:35 chaos portmap[3055]: connect from 204.178.47.32 to callit(pcnfsd)
Dec 28 13:33:37 chaos portmap[3057]: connect from 204.178.42.99 to callit(mountd)
Dec 28 13:33:40 chaos portmap[3059]: connect from 204.178.47.180 to callit(pcnfsd)
Dec 28 13:33:41 chaos portmap[3061]: connect from 204.178.46.154 to callit(pcnfsd)
Dec 28 13:33:50 chaos portmap[3063]: connect from 204.178.47.32 to callit(pcnfsd)
Dec 28 13:33:55 chaos portmap[3065]: connect from 204.178.47.180 to callit(pcnfsd)
Dec 28 13:33:56 chaos portmap[3067]: connect from 204.178.46.154 to callit(pcnfsd)
Dec 28 13:33:57 chaos portmap[3069]: connect from 204.178.42.99 to callit(mountd)
Dec 28 13:34:10 chaos portmap[3071]: connect from 204.178.47.180 to callit(pcnfsd)
Dec 28 13:34:17 chaos portmap[3073]: connect from 204.178.42.99 to callit(mountd)
Dec 28 13:34:38 chaos portmap[3075]: connect from 204.178.42.99 to callit(pcnfsd)
Dec 28 13:34:53 chaos portmap[3077]: connect from 204.178.42.99 to callit(pcnfsd)
Dec 28 13:35:08 chaos portmap[3079]: connect from 204.178.42.99 to callit(pcnfsd)
Dec 28 13:36:15 chaos portmap[3081]: connect from 204.178.41.7 to callit(mountd)
Dec 28 13:36:16 chaos portmap[3083]: connect from 204.178.46.152 to callit(mountd)
Dec 28 13:36:34 chaos portmap[3085]: connect from 204.178.40.43 to callit(mountd)
Dec 28 13:36:37 chaos portmap[3087]: connect from 204.178.41.7 to callit(mountd)
Dec 28 13:36:38 chaos portmap[3089]: connect from 204.178.46.152 to callit(mountd)
Dec 28 13:36:54 chaos portmap[3091]: connect from 204.178.40.43 to callit(mountd)
Dec 28 13:36:57 chaos portmap[3093]: connect from 204.178.41.7 to callit(mountd)
Dec 28 13:36:57 chaos portmap[3095]: connect from 204.178.46.152 to callit(mountd)
Dec 28 13:37:13 chaos portmap[3097]: connect from 204.178.40.43 to callit(mountd)
Dec 28 13:37:17 chaos portmap[3099]: connect from 204.178.46.152 to callit(pcnfsd)
Dec 28 13:37:19 chaos portmap[3101]: connect from 204.178.41.7 to callit(pcnfsd)
Dec 28 13:37:32 chaos portmap[3103]: connect from 204.178.46.152 to callit(pcnfsd)
Dec 28 13:37:33 chaos portmap[3105]: connect from 204.178.40.43 to callit(pcnfsd)
Dec 28 13:37:36 chaos portmap[3107]: connect from 204.178.41.7 to callit(pcnfsd)
Dec 28 13:37:47 chaos portmap[3109]: connect from 204.178.46.152 to callit(pcnfsd)
Dec 28 13:37:48 chaos portmap[3111]: connect from 204.178.40.43 to callit(pcnfsd)
Dec 28 13:37:52 chaos portmap[3113]: connect from 204.178.41.7 to callit(pcnfsd)
Dec 28 13:38:03 chaos portmap[3115]: connect from 204.178.40.43 to callit(pcnfsd)
Dec 28 13:38:33 chaos portmap[3117]: connect from 204.178.46.116 to callit(mountd)
Dec 28 13:38:53 chaos portmap[3119]: connect from 204.178.46.116 to callit(mountd)
Dec 28 13:39:05 chaos portmap[3121]: connect from 204.178.40.144 to callit(300214)
Dec 28 13:39:05 chaos portmap[3122]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:39:05 chaos portmap[3123]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:39:05 chaos portmap[3124]: connect from 204.178.40.144 to callit(300214)
Dec 28 13:39:05 chaos portmap[3125]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:39:05 chaos portmap[3126]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:39:09 chaos portmap[3127]: connect from 204.178.40.144 to callit(300214)
Dec 28 13:39:09 chaos portmap[3128]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:39:09 chaos portmap[3129]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:39:09 chaos portmap[3131]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:39:09 chaos portmap[3130]: connect from 204.178.40.144 to callit(300214)
Dec 28 13:39:09 chaos portmap[3132]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:39:13 chaos portmap[3134]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:39:13 chaos portmap[3133]: connect from 204.178.40.144 to callit(300214)
Dec 28 13:39:13 chaos portmap[3135]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:39:13 chaos portmap[3137]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:39:13 chaos portmap[3136]: connect from 204.178.40.144 to callit(300214)
Dec 28 13:39:13 chaos portmap[3138]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:39:14 chaos portmap[3140]: connect from 204.178.46.116 to callit(mountd)
Dec 28 13:39:28 chaos portmap[3142]: connect from 204.178.40.144 to callit(300214)
Dec 28 13:39:28 chaos portmap[3143]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:39:28 chaos portmap[3144]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:39:28 chaos portmap[3146]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:39:28 chaos portmap[3145]: connect from 204.178.40.144 to callit(300214)
Dec 28 13:39:28 chaos portmap[3147]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:39:32 chaos portmap[3149]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:39:32 chaos portmap[3148]: connect from 204.178.40.144 to callit(300214)
Dec 28 13:39:32 chaos portmap[3150]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:39:32 chaos portmap[3152]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:39:32 chaos portmap[3151]: connect from 204.178.40.144 to callit(300214)
Dec 28 13:39:32 chaos portmap[3153]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:39:35 chaos portmap[3154]: connect from 204.178.46.116 to callit(pcnfsd)
Dec 28 13:39:36 chaos portmap[3156]: connect from 204.178.40.144 to callit(300214)
Dec 28 13:39:36 chaos portmap[3157]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:39:36 chaos portmap[3158]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:39:36 chaos portmap[3160]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:39:36 chaos portmap[3159]: connect from 204.178.40.144 to callit(300214)
Dec 28 13:39:36 chaos portmap[3161]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:39:50 chaos portmap[3162]: connect from 204.178.46.116 to callit(pcnfsd)
Dec 28 13:39:57 chaos portmap[3164]: connect from 204.178.42.156 to callit(mountd)
Dec 28 13:40:05 chaos portmap[3166]: connect from 204.178.46.116 to callit(pcnfsd)
Dec 28 13:40:17 chaos portmap[3168]: connect from 204.178.42.156 to callit(mountd)
Dec 28 13:40:38 chaos portmap[3170]: connect from 204.178.42.156 to callit(mountd)
Dec 28 13:40:46 chaos portmap[3172]: connect from 204.178.42.54 to callit(mountd)
Dec 28 13:40:59 chaos portmap[3174]: connect from 204.178.42.156 to callit(pcnfsd)
Dec 28 13:41:07 chaos portmap[3176]: connect from 204.178.42.54 to callit(mountd)
Dec 28 13:41:14 chaos portmap[3178]: connect from 204.178.42.156 to callit(pcnfsd)
Dec 28 13:41:19 chaos portmap[3180]: connect from 204.178.41.246 to callit(mountd)
Dec 28 13:41:26 chaos portmap[3183]: connect from 204.178.44.179 to callit(mountd)
Dec 28 13:41:28 chaos portmap[3185]: connect from 204.178.42.54 to callit(mountd)
Dec 28 13:41:29 chaos portmap[3187]: connect from 204.178.42.156 to callit(pcnfsd)
Dec 28 13:41:31 chaos sendmail[3189]: NAA03189: from=<owner-linux-kernel-outgoing@vger.rutgers.edu>, size=2937, class=-60, pri=140937, nrcpts=1, msgid=<qwwyaaegbbv.fsf@sap.com>, bodytype=8BITMIME, proto=ESMTP, relay=nic.funet.fi [193.166.0.145]
Dec 28 13:41:31 chaos portmap[3191]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:41:31 chaos portmap[3192]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:41:32 chaos sendmail[3190]: NAA03189: to=<root@chaos.analogic.com>, delay=00:00:01, xdelay=00:00:01, mailer=local, stat=Sent
Dec 28 13:41:39 chaos portmap[3194]: connect from 204.178.41.246 to callit(mountd)
Dec 28 13:41:46 chaos portmap[3196]: connect from 204.178.44.179 to callit(mountd)
Dec 28 13:41:49 chaos portmap[3198]: connect from 204.178.42.54 to callit(pcnfsd)
Dec 28 13:41:58 chaos portmap[3200]: connect from 204.178.41.246 to callit(mountd)
Dec 28 13:42:04 chaos portmap[3202]: connect from 204.178.42.54 to callit(pcnfsd)
Dec 28 13:42:06 chaos portmap[3204]: connect from 204.178.44.179 to callit(mountd)
Dec 28 13:42:07 chaos portmap[3207]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:42:07 chaos portmap[3208]: connect from 127.0.0.1 to getport(ypbind)
Dec 28 13:42:18 chaos portmap[3210]: connect from 204.178.41.246 to callit(pcnfsd)
Dec 28 13:42:19 chaos portmap[3212]: connect from 204.178.42.54 to callit(pcnfsd)
Dec 28 13:42:26 chaos portmap[3214]: connect from 204.178.44.179 to callit(pcnfsd)
Dec 28 13:42:33 chaos portmap[3217]: connect from 204.178.41.246 to callit(pcnfsd)
Dec 28 13:42:41 chaos portmap[3220]: connect from 204.178.44.179 to callit(pcnfsd)
Dec 28 13:42:48 chaos portmap[3222]: connect from 204.178.41.246 to callit(pcnfsd)
Dec 28 13:42:56 chaos portmap[3224]: connect from 204.178.44.179 to callit(pcnfsd)
Dec 28 13:43:07 chaos portmap[3226]: connect from 204.178.47.198 to callit(mountd)
Dec 28 13:43:11 chaos portmap[3228]: connect from 204.178.40.31 to callit(mountd)
Cheers,
Dick Johnson
Penguin : Linux version 2.3.13 on an i686 machine (400.59 BogoMips).
Warning : The end of the world as we know it requires a new calendar.
Seconds : 293223 (until Y2K)
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/