Hi, > This isn't a firewall it's a filter local to the machine, so I'd think if it > was compromised they'd have simply turned off the filter, no? May be... did they obtain the root access or not ? A vanilla TCP-scan do not require Root's privilege. If they are inside as users, they can not turn it off. Another explaination could be the operating system itself. Do your operating system accepts to turn the firewall off ? My FreeBSD firewall run in a securelevel 3, so even the root itself can not change the rules. He must reboot the server in a lower security level, what is a clear sign on intrusion. I don't know what you are using... May be these people did not found the filter on the machine itself and conclude they was filtered any other where ? (not all intruders are smart...) Also, I agree with Blake R. Swopes : may be someone used your IP as a decoy for scanning the other guy. In this case, you can not do anything against that. Jacques Bourdeau >>>>>>>>>>>>>>>>>> Original Message <<<<<<<<<<<<<<<<<< On 12/10/01, 4:18:40 PM, "Jonathan A. Zdziarski" <jonathanat_private> wrote regarding RE: Possible DoS Attack?: > This isn't a firewall it's a filter local to the machine, so I'd think if it > was compromised they'd have simply turned off the filter, no? I'll do some > forensics on our system but I think it's more likely that my machine was the > destination address of someone else's scan, as what another incidents user > suggested. > -----Original Message----- > From: Jacques Bourdeau [mailto:J_Bourdeauat_private] > Sent: Monday, December 10, 2001 2:24 PM > To: Jonathan A. Zdziarski > Cc: incidentsat_private > Subject: Re: Possible DoS Attack? > Hi, > my opinion is this is not a DoS attack against you : your computer > was compromised. What your firewall dropped was the result of a port > scan done by your computer 209.51.136.68. > All drops was TCP-Reset, the regular packet send back when someone try > to open a port which is closed like the 20 TCP. 20 TCP is never open. > Its used to open a port from the server to the FTP client, never to > receive a connection from an FTP client. > The second signature is all remote ports which change time to time, but > local ports did not. When probing ports one after each other, a program > can easily re-use the same client port for all of them. > Finally, a flood would require more bandwith on the attacker side than > on victim side. Remote packets being all from a single IP, it do not > look as a flooding source. > I'm convinced that your computer did a port scan against the remote > IP and your firewall dropped all answers. If you did not expect to > port scan this computer, I suggest you to quickly turn it offline. > Also, this show up a second problem : your firewall did not filter > the outgoing scan. A firewall must filter in both way, incoming and > outgoing. Here, your firewall did not restrict your compromised server > to scan a victim on Internet. I also suggest you to review your filtering > policy and include restriction for outgoing connections, not only > incoming. I recognized the log, so here is a copy of my own IP Filter > rules. Feel free to use it in any way you wish. > Jacques Bourdeau > >>>>>>>>>>>>>>>>>> Original Message <<<<<<<<<<<<<<<<<< > On 12/10/01, 11:02:18 AM, "Jonathan A. Zdziarski" <jonathanat_private> > wrote regarding Possible DoS Attack?: > > I normally disregard scans, however this particular scan doesn't look > like a > > conventional port scan, and it happened around the same time the machine > > went down. It looks like their source port is changing, but the target > port > > on our machine is only changed periodically. Could this have been a DoS > > attack? > > 09/12/2001 09:33:52.493641 elxl0 @0:2 b 212.160.180.53,18 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.495382 elxl0 @0:2 b 212.160.180.53,20 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.497345 elxl0 @0:2 b 212.160.180.53,34 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.499475 elxl0 @0:2 b 212.160.180.53,35 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.502095 elxl0 @0:2 b 212.160.180.53,41 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.510696 elxl0 @0:2 b 212.160.180.53,45 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.511928 elxl0 @0:2 b 212.160.180.53,50 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.525729 elxl0 @0:2 b 212.160.180.53,61 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.526871 elxl0 @0:2 b 212.160.180.53,62 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.527174 elxl0 @0:2 b 212.160.180.53,64 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.529290 elxl0 @0:2 b 212.160.180.53,71 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.529628 elxl0 @0:2 b 212.160.180.53,72 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.529638 elxl0 @0:2 b 212.160.180.53,74 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.535517 elxl0 @0:2 b 212.160.180.53,76 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.549266 elxl0 @0:2 b 212.160.180.53,108 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.554281 elxl0 @0:2 b 212.160.180.53,110 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.561948 elxl0 @0:2 b 212.160.180.53,116 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.570583 elxl0 @0:2 b 212.160.180.53,120 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.573368 elxl0 @0:2 b 212.160.180.53,124 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.573378 elxl0 @0:2 b 212.160.180.53,125 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.575148 elxl0 @0:2 b 212.160.180.53,52309 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.575504 elxl0 @0:2 b 212.160.180.53,1 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.575666 elxl0 @0:2 b 212.160.180.53,2 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.577510 elxl0 @0:2 b 212.160.180.53,17 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.577520 elxl0 @0:2 b 212.160.180.53,18 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.577816 elxl0 @0:2 b 212.160.180.53,20 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.578432 elxl0 @0:2 b 212.160.180.53,24 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.578442 elxl0 @0:2 b 212.160.180.53,26 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.581888 elxl0 @0:2 b 212.160.180.53,27 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.591600 elxl0 @0:2 b 212.160.180.53,30 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.592707 elxl0 @0:2 b 212.160.180.53,39 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.594349 elxl0 @0:2 b 212.160.180.53,69 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.604930 elxl0 @0:2 b 212.160.180.53,71 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.606637 elxl0 @0:2 b 212.160.180.53,75 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.610738 elxl0 @0:2 b 212.160.180.53,80 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.611841 elxl0 @0:2 b 212.160.180.53,90 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.618768 elxl0 @0:2 b 212.160.180.53,95 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.621417 elxl0 @0:2 b 212.160.180.53,99 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.624326 elxl0 @0:2 b 212.160.180.53,101 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.626462 elxl0 @0:2 b 212.160.180.53,102 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.628142 elxl0 @0:2 b 212.160.180.53,104 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.630717 elxl0 @0:2 b 212.160.180.53,105 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.633342 elxl0 @0:2 b 212.160.180.53,133 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.637153 elxl0 @0:2 b 212.160.180.53,138 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.640260 elxl0 @0:2 b 212.160.180.53,1 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.641742 elxl0 @0:2 b 212.160.180.53,2 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.644484 elxl0 @0:2 b 212.160.180.53,3 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.655563 elxl0 @0:2 b 212.160.180.53,8 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.659398 elxl0 @0:2 b 212.160.180.53,17 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.661209 elxl0 @0:2 b 212.160.180.53,20 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.665260 elxl0 @0:2 b 212.160.180.53,21 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.667486 elxl0 @0:2 b 212.160.180.53,23 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.668255 elxl0 @0:2 b 212.160.180.53,25 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.673454 elxl0 @0:2 b 212.160.180.53,27 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.676123 elxl0 @0:2 b 212.160.180.53,35 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.677913 elxl0 @0:2 b 212.160.180.53,37 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.683483 elxl0 @0:2 b 212.160.180.53,47 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.685445 elxl0 @0:2 b 212.160.180.53,48 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.689544 elxl0 @0:2 b 212.160.180.53,53 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.692003 elxl0 @0:2 b 212.160.180.53,57 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.699539 elxl0 @0:2 b 212.160.180.53,61 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.702976 elxl0 @0:2 b 212.160.180.53,82 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.704330 elxl0 @0:2 b 212.160.180.53,89 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.711384 elxl0 @0:2 b 212.160.180.53,93 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.714118 elxl0 @0:2 b 212.160.180.53,95 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.717574 elxl0 @0:2 b 212.160.180.53,98 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.725608 elxl0 @0:2 b 212.160.180.53,104 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.738385 elxl0 @0:2 b 212.160.180.53,109 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.740501 elxl0 @0:2 b 212.160.180.53,110 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.744600 elxl0 @0:2 b 212.160.180.53,120 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.748368 elxl0 @0:2 b 212.160.180.53,126 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.751974 elxl0 @0:2 b 212.160.180.53,8 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.753706 elxl0 @0:2 b 212.160.180.53,11 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.759347 elxl0 @0:2 b 212.160.180.53,15 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.761154 elxl0 @0:2 b 212.160.180.53,16 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.763115 elxl0 @0:2 b 212.160.180.53,18 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.764474 elxl0 @0:2 b 212.160.180.53,25 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.766393 elxl0 @0:2 b 212.160.180.53,29 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.773475 elxl0 @0:2 b 212.160.180.53,36 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.780292 elxl0 @0:2 b 212.160.180.53,44 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.783113 elxl0 @0:2 b 212.160.180.53,45 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.789704 elxl0 @0:2 b 212.160.180.53,49 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.797037 elxl0 @0:2 b 212.160.180.53,54 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.799328 elxl0 @0:2 b 212.160.180.53,56 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.801619 elxl0 @0:2 b 212.160.180.53,57 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.802933 elxl0 @0:2 b 212.160.180.53,58 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.804575 elxl0 @0:2 b 212.160.180.53,59 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.806874 elxl0 @0:2 b 212.160.180.53,62 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:52.813299 elxl0 @0:2 b 212.160.180.53,66 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:53.274372 2x elxl0 @0:2 b 212.160.180.53,113 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:33:53.362523 elxl0 @0:2 b 212.160.180.53,22 -> > > 209.51.136.68,1256 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.439908 elxl0 @0:2 b 212.160.180.53,128 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.448235 elxl0 @0:2 b 212.160.180.53,130 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.448887 elxl0 @0:2 b 212.160.180.53,135 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.452827 elxl0 @0:2 b 212.160.180.53,137 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.453274 elxl0 @0:2 b 212.160.180.53,138 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.458976 elxl0 @0:2 b 212.160.180.53,26 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.464790 elxl0 @0:2 b 212.160.180.53,36 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.474452 elxl0 @0:2 b 212.160.180.53,45 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.475403 elxl0 @0:2 b 212.160.180.53,46 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.475414 elxl0 @0:2 b 212.160.180.53,55 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.476051 elxl0 @0:2 b 212.160.180.53,58 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.488028 elxl0 @0:2 b 212.160.180.53,82 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.491624 elxl0 @0:2 b 212.160.180.53,87 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.494561 elxl0 @0:2 b 212.160.180.53,96 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.508829 elxl0 @0:2 b 212.160.180.53,119 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.514575 elxl0 @0:2 b 212.160.180.53,4 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.523240 elxl0 @0:2 b 212.160.180.53,8 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.523729 elxl0 @0:2 b 212.160.180.53,16 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.528519 elxl0 @0:2 b 212.160.180.53,21 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.529310 elxl0 @0:2 b 212.160.180.53,28 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.532061 elxl0 @0:2 b 212.160.180.53,30 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.534543 elxl0 @0:2 b 212.160.180.53,33 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.535691 elxl0 @0:2 b 212.160.180.53,37 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.550568 elxl0 @0:2 b 212.160.180.53,63 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.553427 elxl0 @0:2 b 212.160.180.53,68 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.554540 elxl0 @0:2 b 212.160.180.53,69 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.555525 elxl0 @0:2 b 212.160.180.53,73 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.555813 elxl0 @0:2 b 212.160.180.53,76 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.556206 elxl0 @0:2 b 212.160.180.53,77 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.559615 elxl0 @0:2 b 212.160.180.53,80 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.562367 elxl0 @0:2 b 212.160.180.53,86 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.563882 elxl0 @0:2 b 212.160.180.53,91 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.568726 elxl0 @0:2 b 212.160.180.53,95 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.572177 elxl0 @0:2 b 212.160.180.53,96 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.573705 elxl0 @0:2 b 212.160.180.53,98 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.574726 elxl0 @0:2 b 212.160.180.53,122 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.582724 elxl0 @0:2 b 212.160.180.53,131 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.586166 elxl0 @0:2 b 212.160.180.53,1 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.593203 elxl0 @0:2 b 212.160.180.53,6 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.593788 elxl0 @0:2 b 212.160.180.53,9 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.595056 elxl0 @0:2 b 212.160.180.53,10 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.600241 elxl0 @0:2 b 212.160.180.53,17 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.601080 elxl0 @0:2 b 212.160.180.53,23 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.604714 elxl0 @0:2 b 212.160.180.53,25 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.608103 elxl0 @0:2 b 212.160.180.53,27 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.609586 elxl0 @0:2 b 212.160.180.53,33 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.615044 elxl0 @0:2 b 212.160.180.53,44 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.616310 elxl0 @0:2 b 212.160.180.53,47 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.617781 elxl0 @0:2 b 212.160.180.53,54 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.617790 elxl0 @0:2 b 212.160.180.53,56 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.619196 elxl0 @0:2 b 212.160.180.53,57 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.629301 elxl0 @0:2 b 212.160.180.53,77 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.630731 elxl0 @0:2 b 212.160.180.53,78 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.634870 elxl0 @0:2 b 212.160.180.53,80 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.635354 elxl0 @0:2 b 212.160.180.53,85 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.636138 elxl0 @0:2 b 212.160.180.53,88 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.637284 elxl0 @0:2 b 212.160.180.53,90 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.638360 elxl0 @0:2 b 212.160.180.53,92 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.641544 elxl0 @0:2 b 212.160.180.53,98 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.643385 elxl0 @0:2 b 212.160.180.53,107 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.651589 elxl0 @0:2 b 212.160.180.53,123 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.664224 elxl0 @0:2 b 212.160.180.53,9 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.666120 elxl0 @0:2 b 212.160.180.53,10 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.668937 elxl0 @0:2 b 212.160.180.53,17 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.670892 elxl0 @0:2 b 212.160.180.53,21 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.671679 elxl0 @0:2 b 212.160.180.53,25 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.907869 elxl0 @0:2 b 212.160.180.53,80 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.927903 elxl0 @0:2 b 212.160.180.53,113 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.983089 elxl0 @0:2 b 212.160.180.53,68 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.986334 elxl0 @0:2 b 212.160.180.53,74 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:39.993999 elxl0 @0:2 b 212.160.180.53,78 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.007110 elxl0 @0:2 b 212.160.180.53,108 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.008737 elxl0 @0:2 b 212.160.180.53,111 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.008748 elxl0 @0:2 b 212.160.180.53,112 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.009115 elxl0 @0:2 b 212.160.180.53,114 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.016787 elxl0 @0:2 b 212.160.180.53,5 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.020876 elxl0 @0:2 b 212.160.180.53,10 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.027789 elxl0 @0:2 b 212.160.180.53,23 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.031230 elxl0 @0:2 b 212.160.180.53,25 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.033193 elxl0 @0:2 b 212.160.180.53,29 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.035613 elxl0 @0:2 b 212.160.180.53,31 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.037385 elxl0 @0:2 b 212.160.180.53,35 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.037739 elxl0 @0:2 b 212.160.180.53,37 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.057655 elxl0 @0:2 b 212.160.180.53,82 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.057665 elxl0 @0:2 b 212.160.180.53,75 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.057675 elxl0 @0:2 b 212.160.180.53,85 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.058560 elxl0 @0:2 b 212.160.180.53,86 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.058570 elxl0 @0:2 b 212.160.180.53,87 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.067244 elxl0 @0:2 b 212.160.180.53,106 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.220614 elxl0 @0:2 b 212.160.180.53,132 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.221918 elxl0 @0:2 b 212.160.180.53,133 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.224154 elxl0 @0:2 b 212.160.180.53,134 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.225570 elxl0 @0:2 b 212.160.180.53,138 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.227043 elxl0 @0:2 b 212.160.180.53,139 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.231911 elxl0 @0:2 b 212.160.180.53,5 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.232612 elxl0 @0:2 b 212.160.180.53,6 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.237432 elxl0 @0:2 b 212.160.180.53,12 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.238968 elxl0 @0:2 b 212.160.180.53,14 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.242122 elxl0 @0:2 b 212.160.180.53,30 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.244579 elxl0 @0:2 b 212.160.180.53,32 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.246870 elxl0 @0:2 b 212.160.180.53,33 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.249281 elxl0 @0:2 b 212.160.180.53,39 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.253486 elxl0 @0:2 b 212.160.180.53,40 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.257519 elxl0 @0:2 b 212.160.180.53,47 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.259116 elxl0 @0:2 b 212.160.180.53,48 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.261127 elxl0 @0:2 b 212.160.180.53,56 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.262554 elxl0 @0:2 b 212.160.180.53,58 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.263798 elxl0 @0:2 b 212.160.180.53,59 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.265218 elxl0 @0:2 b 212.160.180.53,61 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.267803 elxl0 @0:2 b 212.160.180.53,63 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.274682 elxl0 @0:2 b 212.160.180.53,75 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.281732 elxl0 @0:2 b 212.160.180.53,89 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.283201 elxl0 @0:2 b 212.160.180.53,90 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.287645 elxl0 @0:2 b 212.160.180.53,107 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.290411 elxl0 @0:2 b 212.160.180.53,110 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.296241 elxl0 @0:2 b 212.160.180.53,120 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.298312 elxl0 @0:2 b 212.160.180.53,124 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.306971 elxl0 @0:2 b 212.160.180.53,4 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.311220 elxl0 @0:2 b 212.160.180.53,13 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.314826 elxl0 @0:2 b 212.160.180.53,18 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.318267 elxl0 @0:2 b 212.160.180.53,23 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.319712 elxl0 @0:2 b 212.160.180.53,26 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.323020 elxl0 @0:2 b 212.160.180.53,33 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.328554 elxl0 @0:2 b 212.160.180.53,47 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.331384 elxl0 @0:2 b 212.160.180.53,48 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.332236 elxl0 @0:2 b 212.160.180.53,50 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.334160 elxl0 @0:2 b 212.160.180.53,58 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.348264 elxl0 @0:2 b 212.160.180.53,90 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.355956 elxl0 @0:2 b 212.160.180.53,99 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.358346 elxl0 @0:2 b 212.160.180.53,100 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.359727 elxl0 @0:2 b 212.160.180.53,101 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.374311 elxl0 @0:2 b 212.160.180.53,110 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.376270 elxl0 @0:2 b 212.160.180.53,111 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.377912 elxl0 @0:2 b 212.160.180.53,112 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.379990 elxl0 @0:2 b 212.160.180.53,113 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.381885 elxl0 @0:2 b 212.160.180.53,115 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.389552 elxl0 @0:2 b 212.160.180.53,117 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.394789 elxl0 @0:2 b 212.160.180.53,118 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.399632 elxl0 @0:2 b 212.160.180.53,124 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.401337 elxl0 @0:2 b 212.160.180.53,125 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.407702 elxl0 @0:2 b 212.160.180.53,126 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.414451 elxl0 @0:2 b 212.160.180.53,128 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.416904 elxl0 @0:2 b 212.160.180.53,129 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.441535 elxl0 @0:2 b 212.160.180.53,13 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.442831 elxl0 @0:2 b 212.160.180.53,14 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.448956 elxl0 @0:2 b 212.160.180.53,15 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.450622 elxl0 @0:2 b 212.160.180.53,16 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.452955 elxl0 @0:2 b 212.160.180.53,17 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.454885 elxl0 @0:2 b 212.160.180.53,18 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.464428 elxl0 @0:2 b 212.160.180.53,19 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.466881 elxl0 @0:2 b 212.160.180.53,20 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.472798 elxl0 @0:2 b 212.160.180.53,21 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.475569 elxl0 @0:2 b 212.160.180.53,22 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.479044 elxl0 @0:2 b 212.160.180.53,24 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.480491 elxl0 @0:2 b 212.160.180.53,25 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.491474 elxl0 @0:2 b 212.160.180.53,47 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.494248 elxl0 @0:2 b 212.160.180.53,52 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.498188 elxl0 @0:2 b 212.160.180.53,53 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.500325 elxl0 @0:2 b 212.160.180.53,54 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.505139 elxl0 @0:2 b 212.160.180.53,56 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.506641 elxl0 @0:2 b 212.160.180.53,59 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.509522 elxl0 @0:2 b 212.160.180.53,62 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.512292 elxl0 @0:2 b 212.160.180.53,65 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.513943 elxl0 @0:2 b 212.160.180.53,68 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.517236 elxl0 @0:2 b 212.160.180.53,83 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.518993 elxl0 @0:2 b 212.160.180.53,89 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.520567 elxl0 @0:2 b 212.160.180.53,94 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.525910 elxl0 @0:2 b 212.160.180.53,98 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.527884 elxl0 @0:2 b 212.160.180.53,105 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.532962 elxl0 @0:2 b 212.160.180.53,113 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.536030 elxl0 @0:2 b 212.160.180.53,116 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:34:40.540288 elxl0 @0:2 b 212.160.180.53,118 -> > > 209.51.136.68,1137 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.687653 elxl0 @0:2 b 212.160.180.53,97 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.689093 elxl0 @0:2 b 212.160.180.53,98 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.693547 elxl0 @0:2 b 212.160.180.53,102 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.697045 elxl0 @0:2 b 212.160.180.53,13 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.700435 elxl0 @0:2 b 212.160.180.53,16 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.703565 elxl0 @0:2 b 212.160.180.53,26 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.707100 elxl0 @0:2 b 212.160.180.53,33 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.711726 elxl0 @0:2 b 212.160.180.53,52 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.713425 elxl0 @0:2 b 212.160.180.53,54 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.719124 elxl0 @0:2 b 212.160.180.53,66 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.721255 elxl0 @0:2 b 212.160.180.53,73 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.722392 elxl0 @0:2 b 212.160.180.53,86 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.724682 elxl0 @0:2 b 212.160.180.53,89 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.726654 elxl0 @0:2 b 212.160.180.53,90 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.729788 elxl0 @0:2 b 212.160.180.53,109 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.732559 elxl0 @0:2 b 212.160.180.53,110 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.733542 elxl0 @0:2 b 212.160.180.53,111 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.735524 elxl0 @0:2 b 212.160.180.53,112 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.739114 elxl0 @0:2 b 212.160.180.53,116 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.740760 elxl0 @0:2 b 212.160.180.53,127 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.745512 elxl0 @0:2 b 212.160.180.53,133 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.747160 elxl0 @0:2 b 212.160.180.53,135 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.749957 elxl0 @0:2 b 212.160.180.53,2 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.751962 elxl0 @0:2 b 212.160.180.53,3 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.761564 elxl0 @0:2 b 212.160.180.53,34 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.766663 elxl0 @0:2 b 212.160.180.53,44 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.770551 elxl0 @0:2 b 212.160.180.53,47 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.772505 elxl0 @0:2 b 212.160.180.53,51 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.774475 elxl0 @0:2 b 212.160.180.53,52 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.778622 elxl0 @0:2 b 212.160.180.53,63 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.784985 elxl0 @0:2 b 212.160.180.53,74 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.786098 elxl0 @0:2 b 212.160.180.53,76 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.790001 elxl0 @0:2 b 212.160.180.53,87 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.800386 elxl0 @0:2 b 212.160.180.53,111 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.806903 elxl0 @0:2 b 212.160.180.53,127 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.810266 elxl0 @0:2 b 212.160.180.53,136 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.812983 elxl0 @0:2 b 212.160.180.53,5 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.814896 elxl0 @0:2 b 212.160.180.53,9 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.818206 elxl0 @0:2 b 212.160.180.53,22 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.820837 elxl0 @0:2 b 212.160.180.53,27 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.821816 elxl0 @0:2 b 212.160.180.53,29 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.824425 elxl0 @0:2 b 212.160.180.53,39 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.826239 elxl0 @0:2 b 212.160.180.53,40 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.827995 elxl0 @0:2 b 212.160.180.53,42 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.833256 elxl0 @0:2 b 212.160.180.53,80 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.858413 elxl0 @0:2 b 212.160.180.53,22 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.888632 2x elxl0 @0:2 b 212.160.180.53,113 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:00.936854 elxl0 @0:2 b 212.160.180.53,80 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.059608 elxl0 @0:2 b 212.160.180.53,113 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.141844 elxl0 @0:2 b 212.160.180.53,21 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.178196 elxl0 @0:2 b 212.160.180.53,113 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.221949 elxl0 @0:2 b 212.160.180.53,46 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.231618 elxl0 @0:2 b 212.160.180.53,53 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.233573 elxl0 @0:2 b 212.160.180.53,55 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.236359 elxl0 @0:2 b 212.160.180.53,61 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.237053 elxl0 @0:2 b 212.160.180.53,72 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.239859 elxl0 @0:2 b 212.160.180.53,73 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.242558 elxl0 @0:2 b 212.160.180.53,74 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.244126 elxl0 @0:2 b 212.160.180.53,77 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.245717 elxl0 @0:2 b 212.160.180.53,80 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.255341 elxl0 @0:2 b 212.160.180.53,87 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.261092 elxl0 @0:2 b 212.160.180.53,89 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.265040 elxl0 @0:2 b 212.160.180.53,90 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.268118 elxl0 @0:2 b 212.160.180.53,91 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.269581 elxl0 @0:2 b 212.160.180.53,100 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.272679 elxl0 @0:2 b 212.160.180.53,103 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.275644 elxl0 @0:2 b 212.160.180.53,105 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.284661 elxl0 @0:2 b 212.160.180.53,132 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.290988 elxl0 @0:2 b 212.160.180.53,136 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.294986 elxl0 @0:2 b 212.160.180.53,1 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.297603 elxl0 @0:2 b 212.160.180.53,5 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.299615 elxl0 @0:2 b 212.160.180.53,6 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.301539 elxl0 @0:2 b 212.160.180.53,7 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.303694 elxl0 @0:2 b 212.160.180.53,9 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.308423 elxl0 @0:2 b 212.160.180.53,13 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.309569 elxl0 @0:2 b 212.160.180.53,18 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.311539 elxl0 @0:2 b 212.160.180.53,21 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.314650 elxl0 @0:2 b 212.160.180.53,22 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.316938 elxl0 @0:2 b 212.160.180.53,24 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.318460 elxl0 @0:2 b 212.160.180.53,25 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.321854 elxl0 @0:2 b 212.160.180.53,26 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.325458 elxl0 @0:2 b 212.160.180.53,30 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.327307 elxl0 @0:2 b 212.160.180.53,37 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.329721 elxl0 @0:2 b 212.160.180.53,38 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.331531 elxl0 @0:2 b 212.160.180.53,40 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.339010 elxl0 @0:2 b 212.160.180.53,45 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.349601 elxl0 @0:2 b 212.160.180.53,54 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.363972 elxl0 @0:2 b 212.160.180.53,58 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.365116 elxl0 @0:2 b 212.160.180.53,60 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.366424 elxl0 @0:2 b 212.160.180.53,61 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.368551 elxl0 @0:2 b 212.160.180.53,62 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.370032 elxl0 @0:2 b 212.160.180.53,63 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.371669 elxl0 @0:2 b 212.160.180.53,67 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.381047 elxl0 @0:2 b 212.160.180.53,70 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.381829 elxl0 @0:2 b 212.160.180.53,71 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.384416 elxl0 @0:2 b 212.160.180.53,72 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.385966 elxl0 @0:2 b 212.160.180.53,73 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.388050 elxl0 @0:2 b 212.160.180.53,77 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.391339 elxl0 @0:2 b 212.160.180.53,81 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.397353 elxl0 @0:2 b 212.160.180.53,85 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.399244 elxl0 @0:2 b 212.160.180.53,86 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.401175 elxl0 @0:2 b 212.160.180.53,97 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.408907 elxl0 @0:2 b 212.160.180.53,99 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.410718 elxl0 @0:2 b 212.160.180.53,107 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.413161 elxl0 @0:2 b 212.160.180.53,108 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.414927 elxl0 @0:2 b 212.160.180.53,110 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.422305 elxl0 @0:2 b 212.160.180.53,118 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.428046 elxl0 @0:2 b 212.160.180.53,120 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.429016 elxl0 @0:2 b 212.160.180.53,121 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.434921 elxl0 @0:2 b 212.160.180.53,26 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.436428 elxl0 @0:2 b 212.160.180.53,27 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.441637 elxl0 @0:2 b 212.160.180.53,29 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.443812 elxl0 @0:2 b 212.160.180.53,30 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.453474 elxl0 @0:2 b 212.160.180.53,40 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.455735 elxl0 @0:2 b 212.160.180.53,41 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.458351 elxl0 @0:2 b 212.160.180.53,43 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.463758 elxl0 @0:2 b 212.160.180.53,48 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.468346 elxl0 @0:2 b 212.160.180.53,50 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.470516 elxl0 @0:2 b 212.160.180.53,52 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.475062 elxl0 @0:2 b 212.160.180.53,76 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.475714 elxl0 @0:2 b 212.160.180.53,86 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.475724 elxl0 @0:2 b 212.160.180.53,90 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.477027 elxl0 @0:2 b 212.160.180.53,111 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.477036 elxl0 @0:2 b 212.160.180.53,113 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.482645 elxl0 @0:2 b 212.160.180.53,114 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.486155 elxl0 @0:2 b 212.160.180.53,116 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.493254 elxl0 @0:2 b 212.160.180.53,121 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.497181 elxl0 @0:2 b 212.160.180.53,129 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.499514 elxl0 @0:2 b 212.160.180.53,133 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.505049 elxl0 @0:2 b 212.160.180.53,139 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.508975 elxl0 @0:2 b 212.160.180.53,3 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.511410 elxl0 @0:2 b 212.160.180.53,5 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.512095 elxl0 @0:2 b 212.160.180.53,7 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.516147 elxl0 @0:2 b 212.160.180.53,13 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.517990 elxl0 @0:2 b 212.160.180.53,16 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.521639 elxl0 @0:2 b 212.160.180.53,22 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.528153 elxl0 @0:2 b 212.160.180.53,25 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.530606 elxl0 @0:2 b 212.160.180.53,24 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.532245 elxl0 @0:2 b 212.160.180.53,27 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.535037 elxl0 @0:2 b 212.160.180.53,37 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.536348 elxl0 @0:2 b 212.160.180.53,40 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.538637 elxl0 @0:2 b 212.160.180.53,42 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.540481 elxl0 @0:2 b 212.160.180.53,44 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > 09/12/2001 09:35:01.552733 elxl0 @0:2 b 212.160.180.53,55 -> > > 209.51.136.66,1849 PR tcp len 20 40 -R IN > > [And so on...] > > > -------------------------------------------------------------------------- > -- > > This list is provided by the SecurityFocus ARIS analyzer service. > > For more information on this free incident handling, management > > and tracking system please see: http://aris.securityfocus.com ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Mon Dec 10 2001 - 17:07:01 PST