Re: checking security logs

[David Duffey <email@davidduffey.com>]

Hey John,

I highly suggest portsentry and logcheck, if none if your services are
showing connections then it's probably traffic from port scans.

-Duffey

On Tue, Jan 23, 2001 at 02:02:46AM -0600, John Reinke wrote:
> The lights on my cable modem indicate that I've had a bit of regular
> traffic coming through today. I don't have anything running that should be
> creating traffic from my side, so I'm pretty sure it is originating from
> the outside. It doesn't appear that anyone is logging into or affecting my
> Debian box (potato), but I'm not able to determine which logs to look at to
> see what is going on.
> 
> What are the normal logs that will contain information about what packets
> are received/sent through my system and what services were being requested?
> 
> Thanks,
> John
> 
> 
> 
> --  
> To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> 

-- 
David Duffey <email@DavidDuffey.com>                  1605 Hillcrest Dr Apt X30
             -----------------------                  Manhattan, KS 66502
                                                      (785)395-2630