[Labrea-users] The Tarpitting process

[Mark <md...@wi...>]

Hello,
As I watch a gazillion Persist Activity statements scream across the screen that I am  sysloging too I was wondering more on how it works than whats in the readme doc.

I have setup filters on the syslog to move different messages to their own folders.

The message with the most from the labrea host is 
Persist Activity
I assume that this is the FIRST step in the tarpitting process.

I have quite a few ADDITIONAL ACTIVITY messages. These seem more informational. However they all have my ips listed in the message portion of the syslog message. So I kinda assume this kinda refers to activity in scanning/worming attempts on these ips. And comes after the PERSIST ACTIVITY ???

Then the next messages are
PERSIST TRAPPING  
no idea what this means  ???

and INITIAL CONTACT-TARPITTING
and not quite sure what this means. ???

I kinda guess its
Persist Activity
Addtional Activity ???
Inital Contact-Tarpitting
Persist Trapping 

am I even close or way off base ? (more likely this)

Thanks
Mark 

 
______________ ______________ ______________ ______________
Sent via the WirelessCommunityNetworks WebMail system at wirelesscommunitynetworks.com