Errand Packets outbound?
Edward Dekkers
edward at tripled.iinet.net.au
Thu Nov 3 01:28:26 UTC 2005
I woke up this morning to find my upload bandwidth saturated. I only
know how to use iptraf so I pointed it to the ppp0 interface.
There was a flood of udp packets going out from my external interface to
FDCServers.demarc.cogentc and FDCServerNet.demarc.coge.
Very weird addresses in other words. This is all iptraf gives me.
Pointing iptraf at the eth0 interface shows no such packets which lead
me to suspect the Linux box is sending them out.
A reboot of the Fedora 4 box stopped the outbound traffic.
I may have been root kitted?
Any ideas?
Regards,
Ed.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: edward.vcf
Type: text/x-vcard
Size: 363 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20051103/27270391/attachment-0001.vcf>
More information about the fedora-list
mailing list