Quoting Daniel Jacobowitz <dan@debian.org>: > > way to track down who > > connected to rpc.statd? > > Run a tcp logger, like ippl. Even better and more efficient would be to create an ipchains rule that accepts this data and logs it. That way you are focusing on logging just the data you are interested in and you do not need to put your interface into promiscuous mode ;) Regards Simon Murcott e. simon@murcott.net m. +6421 304555