SCOUG-HELP Mailing List Archives

<< Previous Message << >> Next Message >>

Date:	Sat, 28 Feb 2004 23:19:57 PST8
From:	"Steven Levine" <steve53@earthlink.net >
Reply-To:	scoug-help@scoug.com
To:	scoug-help@scoug.com
Subject:	SCOUG-Help: netstat -s radius ?

=====================================================
If you are responding to someone asking for help who
may not be a member of this list, be sure to use the
REPLY TO ALL feature of your email program.
=====================================================

In <4041808B.9D9@peterskye.com>, on 02/28/04
at 10:02 PM, Peter Skye said:

>I've had the opportunity to run NETSTAT a *lot* over the past week.

Wonder why?

>Geez, some of these spammers make like 25 simultaneous SMTP connections.
>If you shut down and restart they connect right back up.

You are running netstat by hand. They are not putting up the connections
by hand.

>Anyway, I've seen a couple of other NETSTAT ports "labeled" this past
>week with monickers I've never heard of.

There are lots of monikers out there. Some were never more than lab rats.

>Maybe it's an optional part of
>the protocol handshake that lets a server identify itself by name or type
>and NETSTAT dutifully reports it.

Nope. It's not optional. The port number is part of ever packet. Your
version of netstat is doing something internally to decode it.

>The WSeB server has it, though -- ports 1812/1813. I didn't look there.
>'Til now. :)

Take a look at the size of the file compared to the services file on your
production system.

>I'm gonna start collecting these labelled port lines from NETSTAT. Maybe
>they're doing something weird to the server.

Wierd? No. Keeping it busy? Yes.

Steven

--
----------------------------------------------------------------------
"Steven Levine" MR2/ICE 2.41 #10183 Warp4/FP15/14.093c_W4
www.scoug.com irc.webbnet.info irc.fyrelizard.org #scoug (Wed 7pm PST)
----------------------------------------------------------------------

=====================================================

To unsubscribe from this list, send an email message
to "steward@scoug.com". In the body of the message,
put the command "unsubscribe scoug-help".

For problems, contact the list owner at
"rollin@scoug.com".

=====================================================

Return to [ 28 | February | 2004 ]

SCOUG, Warp Expo West, and Warpfest are trademarks of the Southern California OS/2 User Group. OS/2, Workplace Shell, and IBM are registered trademarks of International Business Machines Corporation. All other trademarks remain the property of their respective owners.