Security Incidents mailing list archives

Re: Connection from unknown


From: Helmut Springer <delta () FAVEVE UNI-STUTTGART DE>
Date: Mon, 16 Oct 2000 09:14:00 +0200

On Sun 2000-10-15 (20:23), Piotr Kurys wrote:
How do you think, what should or could or does such logs
(/var/log/secure) mean:

Oct 15 00:17:40 MyServer tcpd[982]: connect from unknown
Oct 15 00:17:40 MyServer tcpd[982]: warning: can't get client address:
                                      Socket operation on non-socket

the other side closed the connection before tcpd could get that
information.  either something misconfigured or a crude scan.


--
MfG/best regards, helmut springer
                                            delta () FaVeVe Uni-Stuttgart DE
        
                                        Life is a bitch and then you die.


Current thread: