[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: NULL Scan issues or something else?



Le 07/02/2013 21:22, Daniel Curtis a écrit :
Hi,

>>//(...)/Nothing that should bother you.
/
Okay, so far so good. But what about the rest of
IP addresses, which occurred in logs? You have
mentioned about a /bendel.debian.org <http://bendel.debian.org>/ website.
I wonder why?
Because that's the source of the packet you showed us

I noticed, that all the logged events relating to this
strange rule** mentioned earlier, are related to
/SPT=80/ and /IN=eth0/. Literally all of the connections.
What does it mean?

Those are packets sents by web servers (source port 80) in answer to your requests.

If you do not want to receive them you must not contact the servers.


Reply to: