- To: Bernhard L|der <bl@xxxxxxxxxxx>
- Subject: Re: [SLUG] PROTO=6?
- From: James Morris <jmorris@xxxxxxxxxxxxxxxx>
- Date: Sat Sep 2 00:03:14 2000
- Cc: "SLUG user group (E-mail)" <slug@xxxxxxxxxxx>
On Fri, 1 Sep 2000, Bernhard L|der wrote:
> Hi,
>
> I have my firewall reporting some access attempts.
> It logs:
>
> Sep 2 02:53:48 ws2 kernel: Packet log: input DENY eth0 PROTO=6
> 321.321.321.321:2222 123.123.123.123:119 L=48 S=0x00 I=47977 F=0x4000 T=63
>
> What does the PROTO=6 mean?
>
TCP (see /etc/protocols)
Looks like someone hunting for a news server.
- James
--
James Morris
<jmorris@xxxxxxxxxxxxxxxx>