On Wed, Sep 22, 1999 at 11:22:56PM -0400, James Porter wrote:
...
> >> > pid 7541 (squid), uid 65534: exited on signal 6
> >> > xl0: promiscuous mode enabled
> >> > pid 8711 (cpp), uid 0: exited on signal 10 (core dumped)
> >
> >Looks like your Squid is crashing from time to time, and that someone is
> >running tcpdump or another network sniffer.
>
> Hmm. OK. I do run full firewalling here. But I only opened a couple of
> ports to the SQUID machine like DNS, Port 80, and a few others. Other than
> that she's locked down tight.
It's not that someone is probing your system. It's that "xl0:
promiscuous mode enabled" above, which looks like someone (possibly
you) is opening the Ethernet card in sniffer mode, e.g. to do tcpdump.
At least that's what it usually means.
-- Clifton
-- Clifton Royston -- LavaNet Systems Architect -- cliftonr@lava.net "An absolute monarch would be absolutely wise and good. But no man is strong enough to have no interest. Therefore the best king would be Pure Chance. It is Pure Chance that rules the Universe; therefore, and only therefore, life is good." - ACReceived on Wed Sep 22 1999 - 23:02:29 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:48:32 MST