Hi, my opinion is this is not a DoS attack against you : your computer was compromised. What your firewall dropped was the result of a port scan done by your computer 209.51.136.68. All drops was TCP-Reset, the regular packet send back when someone try to open a port which is closed like the 20 TCP. 20 TCP is never open. Its used to open a port from the server to the FTP client, never to receive a connection from an FTP client. The second signature is all remote ports which change time to time, but local ports did not. When probing ports one after each other, a program can easily re-use the same client port for all of them. Finally, a flood would require more bandwith on the attacker side than on victim side. Remote packets being all from a single IP, it do not look as a flooding source. I'm convinced that your computer did a port scan against the remote IP and your firewall dropped all answers. If you did not expect to port scan this computer, I suggest you to quickly turn it offline. Also, this show up a second problem : your firewall did not filter the outgoing scan. A firewall must filter in both way, incoming and outgoing. Here, your firewall did not restrict your compromised server to scan a victim on Internet. I also suggest you to review your filtering policy and include restriction for outgoing connections, not only incoming. I recognized the log, so here is a copy of my own IP Filter rules. Feel free to use it in any way you wish. Jacques Bourdeau >>>>>>>>>>>>>>>>>> Original Message <<<<<<<<<<<<<<<<<< On 12/10/01, 11:02:18 AM, "Jonathan A. Zdziarski" <jonathanat_private> wrote regarding Possible DoS Attack?: > I normally disregard scans, however this particular scan doesn't look like a > conventional port scan, and it happened around the same time the machine > went down. It looks like their source port is changing, but the target port > on our machine is only changed periodically. Could this have been a DoS > attack? > 09/12/2001 09:33:52.493641 elxl0 @0:2 b 212.160.180.53,18 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.495382 elxl0 @0:2 b 212.160.180.53,20 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.497345 elxl0 @0:2 b 212.160.180.53,34 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.499475 elxl0 @0:2 b 212.160.180.53,35 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.502095 elxl0 @0:2 b 212.160.180.53,41 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.510696 elxl0 @0:2 b 212.160.180.53,45 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.511928 elxl0 @0:2 b 212.160.180.53,50 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.525729 elxl0 @0:2 b 212.160.180.53,61 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.526871 elxl0 @0:2 b 212.160.180.53,62 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.527174 elxl0 @0:2 b 212.160.180.53,64 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.529290 elxl0 @0:2 b 212.160.180.53,71 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.529628 elxl0 @0:2 b 212.160.180.53,72 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.529638 elxl0 @0:2 b 212.160.180.53,74 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.535517 elxl0 @0:2 b 212.160.180.53,76 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.549266 elxl0 @0:2 b 212.160.180.53,108 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.554281 elxl0 @0:2 b 212.160.180.53,110 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.561948 elxl0 @0:2 b 212.160.180.53,116 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.570583 elxl0 @0:2 b 212.160.180.53,120 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.573368 elxl0 @0:2 b 212.160.180.53,124 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.573378 elxl0 @0:2 b 212.160.180.53,125 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.575148 elxl0 @0:2 b 212.160.180.53,52309 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.575504 elxl0 @0:2 b 212.160.180.53,1 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.575666 elxl0 @0:2 b 212.160.180.53,2 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.577510 elxl0 @0:2 b 212.160.180.53,17 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.577520 elxl0 @0:2 b 212.160.180.53,18 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.577816 elxl0 @0:2 b 212.160.180.53,20 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.578432 elxl0 @0:2 b 212.160.180.53,24 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.578442 elxl0 @0:2 b 212.160.180.53,26 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.581888 elxl0 @0:2 b 212.160.180.53,27 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.591600 elxl0 @0:2 b 212.160.180.53,30 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.592707 elxl0 @0:2 b 212.160.180.53,39 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.594349 elxl0 @0:2 b 212.160.180.53,69 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.604930 elxl0 @0:2 b 212.160.180.53,71 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.606637 elxl0 @0:2 b 212.160.180.53,75 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.610738 elxl0 @0:2 b 212.160.180.53,80 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.611841 elxl0 @0:2 b 212.160.180.53,90 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.618768 elxl0 @0:2 b 212.160.180.53,95 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.621417 elxl0 @0:2 b 212.160.180.53,99 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.624326 elxl0 @0:2 b 212.160.180.53,101 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.626462 elxl0 @0:2 b 212.160.180.53,102 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.628142 elxl0 @0:2 b 212.160.180.53,104 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.630717 elxl0 @0:2 b 212.160.180.53,105 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.633342 elxl0 @0:2 b 212.160.180.53,133 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.637153 elxl0 @0:2 b 212.160.180.53,138 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.640260 elxl0 @0:2 b 212.160.180.53,1 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.641742 elxl0 @0:2 b 212.160.180.53,2 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.644484 elxl0 @0:2 b 212.160.180.53,3 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.655563 elxl0 @0:2 b 212.160.180.53,8 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.659398 elxl0 @0:2 b 212.160.180.53,17 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.661209 elxl0 @0:2 b 212.160.180.53,20 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.665260 elxl0 @0:2 b 212.160.180.53,21 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.667486 elxl0 @0:2 b 212.160.180.53,23 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.668255 elxl0 @0:2 b 212.160.180.53,25 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.673454 elxl0 @0:2 b 212.160.180.53,27 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.676123 elxl0 @0:2 b 212.160.180.53,35 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.677913 elxl0 @0:2 b 212.160.180.53,37 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.683483 elxl0 @0:2 b 212.160.180.53,47 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.685445 elxl0 @0:2 b 212.160.180.53,48 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.689544 elxl0 @0:2 b 212.160.180.53,53 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.692003 elxl0 @0:2 b 212.160.180.53,57 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.699539 elxl0 @0:2 b 212.160.180.53,61 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.702976 elxl0 @0:2 b 212.160.180.53,82 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.704330 elxl0 @0:2 b 212.160.180.53,89 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.711384 elxl0 @0:2 b 212.160.180.53,93 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.714118 elxl0 @0:2 b 212.160.180.53,95 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.717574 elxl0 @0:2 b 212.160.180.53,98 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.725608 elxl0 @0:2 b 212.160.180.53,104 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.738385 elxl0 @0:2 b 212.160.180.53,109 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.740501 elxl0 @0:2 b 212.160.180.53,110 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.744600 elxl0 @0:2 b 212.160.180.53,120 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.748368 elxl0 @0:2 b 212.160.180.53,126 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.751974 elxl0 @0:2 b 212.160.180.53,8 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.753706 elxl0 @0:2 b 212.160.180.53,11 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.759347 elxl0 @0:2 b 212.160.180.53,15 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.761154 elxl0 @0:2 b 212.160.180.53,16 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.763115 elxl0 @0:2 b 212.160.180.53,18 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.764474 elxl0 @0:2 b 212.160.180.53,25 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.766393 elxl0 @0:2 b 212.160.180.53,29 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.773475 elxl0 @0:2 b 212.160.180.53,36 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.780292 elxl0 @0:2 b 212.160.180.53,44 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.783113 elxl0 @0:2 b 212.160.180.53,45 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.789704 elxl0 @0:2 b 212.160.180.53,49 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.797037 elxl0 @0:2 b 212.160.180.53,54 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.799328 elxl0 @0:2 b 212.160.180.53,56 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.801619 elxl0 @0:2 b 212.160.180.53,57 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.802933 elxl0 @0:2 b 212.160.180.53,58 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.804575 elxl0 @0:2 b 212.160.180.53,59 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.806874 elxl0 @0:2 b 212.160.180.53,62 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:52.813299 elxl0 @0:2 b 212.160.180.53,66 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:53.274372 2x elxl0 @0:2 b 212.160.180.53,113 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:33:53.362523 elxl0 @0:2 b 212.160.180.53,22 -> > 209.51.136.68,1256 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.439908 elxl0 @0:2 b 212.160.180.53,128 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.448235 elxl0 @0:2 b 212.160.180.53,130 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.448887 elxl0 @0:2 b 212.160.180.53,135 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.452827 elxl0 @0:2 b 212.160.180.53,137 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.453274 elxl0 @0:2 b 212.160.180.53,138 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.458976 elxl0 @0:2 b 212.160.180.53,26 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.464790 elxl0 @0:2 b 212.160.180.53,36 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.474452 elxl0 @0:2 b 212.160.180.53,45 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.475403 elxl0 @0:2 b 212.160.180.53,46 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.475414 elxl0 @0:2 b 212.160.180.53,55 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.476051 elxl0 @0:2 b 212.160.180.53,58 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.488028 elxl0 @0:2 b 212.160.180.53,82 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.491624 elxl0 @0:2 b 212.160.180.53,87 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.494561 elxl0 @0:2 b 212.160.180.53,96 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.508829 elxl0 @0:2 b 212.160.180.53,119 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.514575 elxl0 @0:2 b 212.160.180.53,4 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.523240 elxl0 @0:2 b 212.160.180.53,8 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.523729 elxl0 @0:2 b 212.160.180.53,16 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.528519 elxl0 @0:2 b 212.160.180.53,21 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.529310 elxl0 @0:2 b 212.160.180.53,28 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.532061 elxl0 @0:2 b 212.160.180.53,30 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.534543 elxl0 @0:2 b 212.160.180.53,33 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.535691 elxl0 @0:2 b 212.160.180.53,37 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.550568 elxl0 @0:2 b 212.160.180.53,63 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.553427 elxl0 @0:2 b 212.160.180.53,68 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.554540 elxl0 @0:2 b 212.160.180.53,69 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.555525 elxl0 @0:2 b 212.160.180.53,73 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.555813 elxl0 @0:2 b 212.160.180.53,76 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.556206 elxl0 @0:2 b 212.160.180.53,77 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.559615 elxl0 @0:2 b 212.160.180.53,80 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.562367 elxl0 @0:2 b 212.160.180.53,86 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.563882 elxl0 @0:2 b 212.160.180.53,91 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.568726 elxl0 @0:2 b 212.160.180.53,95 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.572177 elxl0 @0:2 b 212.160.180.53,96 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.573705 elxl0 @0:2 b 212.160.180.53,98 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.574726 elxl0 @0:2 b 212.160.180.53,122 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.582724 elxl0 @0:2 b 212.160.180.53,131 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.586166 elxl0 @0:2 b 212.160.180.53,1 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.593203 elxl0 @0:2 b 212.160.180.53,6 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.593788 elxl0 @0:2 b 212.160.180.53,9 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.595056 elxl0 @0:2 b 212.160.180.53,10 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.600241 elxl0 @0:2 b 212.160.180.53,17 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.601080 elxl0 @0:2 b 212.160.180.53,23 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.604714 elxl0 @0:2 b 212.160.180.53,25 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.608103 elxl0 @0:2 b 212.160.180.53,27 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.609586 elxl0 @0:2 b 212.160.180.53,33 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.615044 elxl0 @0:2 b 212.160.180.53,44 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.616310 elxl0 @0:2 b 212.160.180.53,47 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.617781 elxl0 @0:2 b 212.160.180.53,54 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.617790 elxl0 @0:2 b 212.160.180.53,56 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.619196 elxl0 @0:2 b 212.160.180.53,57 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.629301 elxl0 @0:2 b 212.160.180.53,77 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.630731 elxl0 @0:2 b 212.160.180.53,78 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.634870 elxl0 @0:2 b 212.160.180.53,80 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.635354 elxl0 @0:2 b 212.160.180.53,85 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.636138 elxl0 @0:2 b 212.160.180.53,88 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.637284 elxl0 @0:2 b 212.160.180.53,90 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.638360 elxl0 @0:2 b 212.160.180.53,92 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.641544 elxl0 @0:2 b 212.160.180.53,98 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.643385 elxl0 @0:2 b 212.160.180.53,107 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.651589 elxl0 @0:2 b 212.160.180.53,123 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.664224 elxl0 @0:2 b 212.160.180.53,9 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.666120 elxl0 @0:2 b 212.160.180.53,10 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.668937 elxl0 @0:2 b 212.160.180.53,17 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.670892 elxl0 @0:2 b 212.160.180.53,21 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.671679 elxl0 @0:2 b 212.160.180.53,25 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.907869 elxl0 @0:2 b 212.160.180.53,80 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.927903 elxl0 @0:2 b 212.160.180.53,113 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.983089 elxl0 @0:2 b 212.160.180.53,68 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.986334 elxl0 @0:2 b 212.160.180.53,74 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:39.993999 elxl0 @0:2 b 212.160.180.53,78 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.007110 elxl0 @0:2 b 212.160.180.53,108 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.008737 elxl0 @0:2 b 212.160.180.53,111 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.008748 elxl0 @0:2 b 212.160.180.53,112 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.009115 elxl0 @0:2 b 212.160.180.53,114 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.016787 elxl0 @0:2 b 212.160.180.53,5 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.020876 elxl0 @0:2 b 212.160.180.53,10 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.027789 elxl0 @0:2 b 212.160.180.53,23 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.031230 elxl0 @0:2 b 212.160.180.53,25 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.033193 elxl0 @0:2 b 212.160.180.53,29 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.035613 elxl0 @0:2 b 212.160.180.53,31 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.037385 elxl0 @0:2 b 212.160.180.53,35 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.037739 elxl0 @0:2 b 212.160.180.53,37 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.057655 elxl0 @0:2 b 212.160.180.53,82 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.057665 elxl0 @0:2 b 212.160.180.53,75 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.057675 elxl0 @0:2 b 212.160.180.53,85 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.058560 elxl0 @0:2 b 212.160.180.53,86 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.058570 elxl0 @0:2 b 212.160.180.53,87 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.067244 elxl0 @0:2 b 212.160.180.53,106 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.220614 elxl0 @0:2 b 212.160.180.53,132 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.221918 elxl0 @0:2 b 212.160.180.53,133 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.224154 elxl0 @0:2 b 212.160.180.53,134 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.225570 elxl0 @0:2 b 212.160.180.53,138 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.227043 elxl0 @0:2 b 212.160.180.53,139 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.231911 elxl0 @0:2 b 212.160.180.53,5 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.232612 elxl0 @0:2 b 212.160.180.53,6 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.237432 elxl0 @0:2 b 212.160.180.53,12 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.238968 elxl0 @0:2 b 212.160.180.53,14 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.242122 elxl0 @0:2 b 212.160.180.53,30 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.244579 elxl0 @0:2 b 212.160.180.53,32 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.246870 elxl0 @0:2 b 212.160.180.53,33 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.249281 elxl0 @0:2 b 212.160.180.53,39 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.253486 elxl0 @0:2 b 212.160.180.53,40 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.257519 elxl0 @0:2 b 212.160.180.53,47 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.259116 elxl0 @0:2 b 212.160.180.53,48 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.261127 elxl0 @0:2 b 212.160.180.53,56 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.262554 elxl0 @0:2 b 212.160.180.53,58 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.263798 elxl0 @0:2 b 212.160.180.53,59 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.265218 elxl0 @0:2 b 212.160.180.53,61 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.267803 elxl0 @0:2 b 212.160.180.53,63 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.274682 elxl0 @0:2 b 212.160.180.53,75 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.281732 elxl0 @0:2 b 212.160.180.53,89 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.283201 elxl0 @0:2 b 212.160.180.53,90 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.287645 elxl0 @0:2 b 212.160.180.53,107 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.290411 elxl0 @0:2 b 212.160.180.53,110 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.296241 elxl0 @0:2 b 212.160.180.53,120 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.298312 elxl0 @0:2 b 212.160.180.53,124 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.306971 elxl0 @0:2 b 212.160.180.53,4 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.311220 elxl0 @0:2 b 212.160.180.53,13 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.314826 elxl0 @0:2 b 212.160.180.53,18 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.318267 elxl0 @0:2 b 212.160.180.53,23 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.319712 elxl0 @0:2 b 212.160.180.53,26 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.323020 elxl0 @0:2 b 212.160.180.53,33 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.328554 elxl0 @0:2 b 212.160.180.53,47 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.331384 elxl0 @0:2 b 212.160.180.53,48 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.332236 elxl0 @0:2 b 212.160.180.53,50 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.334160 elxl0 @0:2 b 212.160.180.53,58 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.348264 elxl0 @0:2 b 212.160.180.53,90 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.355956 elxl0 @0:2 b 212.160.180.53,99 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.358346 elxl0 @0:2 b 212.160.180.53,100 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.359727 elxl0 @0:2 b 212.160.180.53,101 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.374311 elxl0 @0:2 b 212.160.180.53,110 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.376270 elxl0 @0:2 b 212.160.180.53,111 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.377912 elxl0 @0:2 b 212.160.180.53,112 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.379990 elxl0 @0:2 b 212.160.180.53,113 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.381885 elxl0 @0:2 b 212.160.180.53,115 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.389552 elxl0 @0:2 b 212.160.180.53,117 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.394789 elxl0 @0:2 b 212.160.180.53,118 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.399632 elxl0 @0:2 b 212.160.180.53,124 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.401337 elxl0 @0:2 b 212.160.180.53,125 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.407702 elxl0 @0:2 b 212.160.180.53,126 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.414451 elxl0 @0:2 b 212.160.180.53,128 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.416904 elxl0 @0:2 b 212.160.180.53,129 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.441535 elxl0 @0:2 b 212.160.180.53,13 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.442831 elxl0 @0:2 b 212.160.180.53,14 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.448956 elxl0 @0:2 b 212.160.180.53,15 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.450622 elxl0 @0:2 b 212.160.180.53,16 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.452955 elxl0 @0:2 b 212.160.180.53,17 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.454885 elxl0 @0:2 b 212.160.180.53,18 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.464428 elxl0 @0:2 b 212.160.180.53,19 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.466881 elxl0 @0:2 b 212.160.180.53,20 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.472798 elxl0 @0:2 b 212.160.180.53,21 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.475569 elxl0 @0:2 b 212.160.180.53,22 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.479044 elxl0 @0:2 b 212.160.180.53,24 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.480491 elxl0 @0:2 b 212.160.180.53,25 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.491474 elxl0 @0:2 b 212.160.180.53,47 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.494248 elxl0 @0:2 b 212.160.180.53,52 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.498188 elxl0 @0:2 b 212.160.180.53,53 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.500325 elxl0 @0:2 b 212.160.180.53,54 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.505139 elxl0 @0:2 b 212.160.180.53,56 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.506641 elxl0 @0:2 b 212.160.180.53,59 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.509522 elxl0 @0:2 b 212.160.180.53,62 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.512292 elxl0 @0:2 b 212.160.180.53,65 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.513943 elxl0 @0:2 b 212.160.180.53,68 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.517236 elxl0 @0:2 b 212.160.180.53,83 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.518993 elxl0 @0:2 b 212.160.180.53,89 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.520567 elxl0 @0:2 b 212.160.180.53,94 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.525910 elxl0 @0:2 b 212.160.180.53,98 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.527884 elxl0 @0:2 b 212.160.180.53,105 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.532962 elxl0 @0:2 b 212.160.180.53,113 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.536030 elxl0 @0:2 b 212.160.180.53,116 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:34:40.540288 elxl0 @0:2 b 212.160.180.53,118 -> > 209.51.136.68,1137 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.687653 elxl0 @0:2 b 212.160.180.53,97 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.689093 elxl0 @0:2 b 212.160.180.53,98 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.693547 elxl0 @0:2 b 212.160.180.53,102 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.697045 elxl0 @0:2 b 212.160.180.53,13 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.700435 elxl0 @0:2 b 212.160.180.53,16 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.703565 elxl0 @0:2 b 212.160.180.53,26 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.707100 elxl0 @0:2 b 212.160.180.53,33 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.711726 elxl0 @0:2 b 212.160.180.53,52 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.713425 elxl0 @0:2 b 212.160.180.53,54 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.719124 elxl0 @0:2 b 212.160.180.53,66 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.721255 elxl0 @0:2 b 212.160.180.53,73 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.722392 elxl0 @0:2 b 212.160.180.53,86 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.724682 elxl0 @0:2 b 212.160.180.53,89 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.726654 elxl0 @0:2 b 212.160.180.53,90 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.729788 elxl0 @0:2 b 212.160.180.53,109 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.732559 elxl0 @0:2 b 212.160.180.53,110 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.733542 elxl0 @0:2 b 212.160.180.53,111 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.735524 elxl0 @0:2 b 212.160.180.53,112 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.739114 elxl0 @0:2 b 212.160.180.53,116 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.740760 elxl0 @0:2 b 212.160.180.53,127 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.745512 elxl0 @0:2 b 212.160.180.53,133 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.747160 elxl0 @0:2 b 212.160.180.53,135 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.749957 elxl0 @0:2 b 212.160.180.53,2 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.751962 elxl0 @0:2 b 212.160.180.53,3 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.761564 elxl0 @0:2 b 212.160.180.53,34 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.766663 elxl0 @0:2 b 212.160.180.53,44 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.770551 elxl0 @0:2 b 212.160.180.53,47 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.772505 elxl0 @0:2 b 212.160.180.53,51 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.774475 elxl0 @0:2 b 212.160.180.53,52 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.778622 elxl0 @0:2 b 212.160.180.53,63 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.784985 elxl0 @0:2 b 212.160.180.53,74 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.786098 elxl0 @0:2 b 212.160.180.53,76 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.790001 elxl0 @0:2 b 212.160.180.53,87 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.800386 elxl0 @0:2 b 212.160.180.53,111 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.806903 elxl0 @0:2 b 212.160.180.53,127 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.810266 elxl0 @0:2 b 212.160.180.53,136 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.812983 elxl0 @0:2 b 212.160.180.53,5 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.814896 elxl0 @0:2 b 212.160.180.53,9 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.818206 elxl0 @0:2 b 212.160.180.53,22 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.820837 elxl0 @0:2 b 212.160.180.53,27 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.821816 elxl0 @0:2 b 212.160.180.53,29 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.824425 elxl0 @0:2 b 212.160.180.53,39 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.826239 elxl0 @0:2 b 212.160.180.53,40 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.827995 elxl0 @0:2 b 212.160.180.53,42 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.833256 elxl0 @0:2 b 212.160.180.53,80 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.858413 elxl0 @0:2 b 212.160.180.53,22 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.888632 2x elxl0 @0:2 b 212.160.180.53,113 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:00.936854 elxl0 @0:2 b 212.160.180.53,80 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.059608 elxl0 @0:2 b 212.160.180.53,113 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.141844 elxl0 @0:2 b 212.160.180.53,21 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.178196 elxl0 @0:2 b 212.160.180.53,113 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.221949 elxl0 @0:2 b 212.160.180.53,46 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.231618 elxl0 @0:2 b 212.160.180.53,53 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.233573 elxl0 @0:2 b 212.160.180.53,55 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.236359 elxl0 @0:2 b 212.160.180.53,61 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.237053 elxl0 @0:2 b 212.160.180.53,72 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.239859 elxl0 @0:2 b 212.160.180.53,73 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.242558 elxl0 @0:2 b 212.160.180.53,74 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.244126 elxl0 @0:2 b 212.160.180.53,77 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.245717 elxl0 @0:2 b 212.160.180.53,80 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.255341 elxl0 @0:2 b 212.160.180.53,87 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.261092 elxl0 @0:2 b 212.160.180.53,89 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.265040 elxl0 @0:2 b 212.160.180.53,90 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.268118 elxl0 @0:2 b 212.160.180.53,91 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.269581 elxl0 @0:2 b 212.160.180.53,100 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.272679 elxl0 @0:2 b 212.160.180.53,103 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.275644 elxl0 @0:2 b 212.160.180.53,105 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.284661 elxl0 @0:2 b 212.160.180.53,132 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.290988 elxl0 @0:2 b 212.160.180.53,136 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.294986 elxl0 @0:2 b 212.160.180.53,1 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.297603 elxl0 @0:2 b 212.160.180.53,5 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.299615 elxl0 @0:2 b 212.160.180.53,6 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.301539 elxl0 @0:2 b 212.160.180.53,7 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.303694 elxl0 @0:2 b 212.160.180.53,9 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.308423 elxl0 @0:2 b 212.160.180.53,13 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.309569 elxl0 @0:2 b 212.160.180.53,18 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.311539 elxl0 @0:2 b 212.160.180.53,21 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.314650 elxl0 @0:2 b 212.160.180.53,22 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.316938 elxl0 @0:2 b 212.160.180.53,24 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.318460 elxl0 @0:2 b 212.160.180.53,25 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.321854 elxl0 @0:2 b 212.160.180.53,26 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.325458 elxl0 @0:2 b 212.160.180.53,30 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.327307 elxl0 @0:2 b 212.160.180.53,37 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.329721 elxl0 @0:2 b 212.160.180.53,38 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.331531 elxl0 @0:2 b 212.160.180.53,40 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.339010 elxl0 @0:2 b 212.160.180.53,45 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.349601 elxl0 @0:2 b 212.160.180.53,54 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.363972 elxl0 @0:2 b 212.160.180.53,58 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.365116 elxl0 @0:2 b 212.160.180.53,60 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.366424 elxl0 @0:2 b 212.160.180.53,61 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.368551 elxl0 @0:2 b 212.160.180.53,62 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.370032 elxl0 @0:2 b 212.160.180.53,63 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.371669 elxl0 @0:2 b 212.160.180.53,67 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.381047 elxl0 @0:2 b 212.160.180.53,70 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.381829 elxl0 @0:2 b 212.160.180.53,71 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.384416 elxl0 @0:2 b 212.160.180.53,72 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.385966 elxl0 @0:2 b 212.160.180.53,73 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.388050 elxl0 @0:2 b 212.160.180.53,77 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.391339 elxl0 @0:2 b 212.160.180.53,81 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.397353 elxl0 @0:2 b 212.160.180.53,85 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.399244 elxl0 @0:2 b 212.160.180.53,86 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.401175 elxl0 @0:2 b 212.160.180.53,97 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.408907 elxl0 @0:2 b 212.160.180.53,99 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.410718 elxl0 @0:2 b 212.160.180.53,107 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.413161 elxl0 @0:2 b 212.160.180.53,108 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.414927 elxl0 @0:2 b 212.160.180.53,110 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.422305 elxl0 @0:2 b 212.160.180.53,118 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.428046 elxl0 @0:2 b 212.160.180.53,120 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.429016 elxl0 @0:2 b 212.160.180.53,121 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.434921 elxl0 @0:2 b 212.160.180.53,26 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.436428 elxl0 @0:2 b 212.160.180.53,27 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.441637 elxl0 @0:2 b 212.160.180.53,29 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.443812 elxl0 @0:2 b 212.160.180.53,30 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.453474 elxl0 @0:2 b 212.160.180.53,40 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.455735 elxl0 @0:2 b 212.160.180.53,41 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.458351 elxl0 @0:2 b 212.160.180.53,43 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.463758 elxl0 @0:2 b 212.160.180.53,48 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.468346 elxl0 @0:2 b 212.160.180.53,50 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.470516 elxl0 @0:2 b 212.160.180.53,52 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.475062 elxl0 @0:2 b 212.160.180.53,76 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.475714 elxl0 @0:2 b 212.160.180.53,86 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.475724 elxl0 @0:2 b 212.160.180.53,90 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.477027 elxl0 @0:2 b 212.160.180.53,111 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.477036 elxl0 @0:2 b 212.160.180.53,113 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.482645 elxl0 @0:2 b 212.160.180.53,114 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.486155 elxl0 @0:2 b 212.160.180.53,116 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.493254 elxl0 @0:2 b 212.160.180.53,121 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.497181 elxl0 @0:2 b 212.160.180.53,129 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.499514 elxl0 @0:2 b 212.160.180.53,133 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.505049 elxl0 @0:2 b 212.160.180.53,139 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.508975 elxl0 @0:2 b 212.160.180.53,3 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.511410 elxl0 @0:2 b 212.160.180.53,5 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.512095 elxl0 @0:2 b 212.160.180.53,7 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.516147 elxl0 @0:2 b 212.160.180.53,13 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.517990 elxl0 @0:2 b 212.160.180.53,16 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.521639 elxl0 @0:2 b 212.160.180.53,22 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.528153 elxl0 @0:2 b 212.160.180.53,25 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.530606 elxl0 @0:2 b 212.160.180.53,24 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.532245 elxl0 @0:2 b 212.160.180.53,27 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.535037 elxl0 @0:2 b 212.160.180.53,37 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.536348 elxl0 @0:2 b 212.160.180.53,40 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.538637 elxl0 @0:2 b 212.160.180.53,42 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.540481 elxl0 @0:2 b 212.160.180.53,44 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > 09/12/2001 09:35:01.552733 elxl0 @0:2 b 212.160.180.53,55 -> > 209.51.136.66,1849 PR tcp len 20 40 -R IN > [And so on...] > -------------------------------------------------------------------------- -- > This list is provided by the SecurityFocus ARIS analyzer service. > For more information on this free incident handling, management > and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Mon Dec 10 2001 - 16:19:23 PST