Re: [Labrea-users] Question about the log
Status: Abandoned
Brought to you by:
lorgor
Menu
▾
▴
Re: [Labrea-users] Question about the log
|
From: Paul W. <pw...@nc...> - 2004-07-09 03:04:10
|
My understanding is that the "*" is there to simply prevent syslog from putting "Above message repeated x number of times" in the log for duplicate entries. Not sure how you know if a connection has been dropped other than it no longer has log messages showing up. -paul On Jul 8, 2004, at 7:29 PM, chuck wrote: > labrea -z -i eth1 -v -h -o > /var/log/LaBrea.log > gives .... > Thu Jul 8 17:59:50 2004 Initial Connect - tarpitting: 81.84.126.252 > 3716 -> 67.41.73.202 445 * > Thu Jul 8 18:01:39 2004 Initial Connect - tarpitting: > 218.190.198.124 3927 -> 67.41.73.202 5554 > Thu Jul 8 18:01:39 2004 Initial Connect - tarpitting: > 218.190.198.124 3929 -> 67.41.73.204 5554 * > Thu Jul 8 18:01:39 2004 Initial Connect - tarpitting: > 218.190.198.124 3928 -> 67.41.73.203 5554 > Thu Jul 8 18:01:39 2004 Initial Connect - tarpitting: > 218.190.198.124 3933 -> 67.41.73.205 5554 * > Thu Jul 8 18:01:39 2004 Initial Connect - tarpitting: > 218.190.198.124 4436 -> 67.41.73.205 5554 > Thu Jul 8 18:01:39 2004 Initial Connect - tarpitting: > 218.190.198.124 4435 -> 67.41.73.204 5554 * > Thu Jul 8 18:01:39 2004 Initial Connect - tarpitting: > 218.190.198.124 4434 -> 67.41.73.203 5554 > Thu Jul 8 18:01:39 2004 Initial Connect - tarpitting: > 218.190.198.124 4432 -> 67.41.73.202 5554 * > > What does the "*" mean? I can't find a description of the log > anywhere. And how do I > tell when one has escaped? > Tks > > > > > ------------------------------------------------------- > This SF.Net email sponsored by Black Hat Briefings & Training. > Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital > self defense, top technical experts, no vendor pitches, unmatched > networking opportunities. Visit www.blackhat.com > _______________________________________________ > Labrea-users mailing list > Lab...@li... > https://lists.sourceforge.net/lists/listinfo/labrea-users > ------------------------------------------------------------------------ -------------------- Paul Wefel NCSA Network Engineer phone: 217-244-2193 cell: 217-840-9929 pw...@nc... CAB 269, 605 E Springfield, Champaign IL 61820 |
