Tugger the SLUGger!SLUG Mailing List Archives

Re: [SLUG] PROTO=6?


On Fri, 1 Sep 2000, Bernhard L|der wrote:

> Hi,
> 
> I have my firewall reporting some access attempts.
> It logs:
> 
> Sep  2 02:53:48 ws2 kernel: Packet log: input DENY eth0 PROTO=6
> 321.321.321.321:2222 123.123.123.123:119 L=48 S=0x00 I=47977 F=0x4000 T=63
> 
> What does the PROTO=6 mean?
> 

TCP (see /etc/protocols)

Looks like someone hunting for a news server.




- James
--
James Morris
<jmorris@xxxxxxxxxxxxxxxx>