Web activity after web logon
From: me (secad_at_netspace.net.au)
Date: 01/31/04
- Next message: Hoyle: "Re: Some questions about 9.0"
- Previous message: Ed Hurst: "Re: Removing Ximian Desktop 2 from SuSE 8.2"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: Sun, 01 Feb 2004 00:52:19 +1100
Just recently, my SuSE 9 box has been indulging in spontaneous
transmission & reception of data via the modem immediately after
logging on to my ISP.
I have captured about 0.8 MByte of traffic before it stopped, using
tcpdump to save raw packets to a file.
I have (I think) disabled the normal SuSE watcher, which used to do a
similar thing. I am unsure whether my disabling was effective or if I
merely stopped it from being visible on the task bar. The other
possibility is that this box is (gasp, shudder) infected.
I now need to work out how to interpret the packets to deduce the
content. Any thoughts?
Jim Adamthwaite.
- Next message: Hoyle: "Re: Some questions about 9.0"
- Previous message: Ed Hurst: "Re: Removing Ximian Desktop 2 from SuSE 8.2"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|