[Gllug] Code Red

Dean dean.wilson3 at virgin.net
Fri Jul 20 11:37:38 UTC 2001


On Fri, Jul 20, 2001 at 12:13:12PM +0100, john.hearns at framestore.co.uk wrote:
> There's a good thread going on this on london-pm
 
> The way to diagnose a probe is to grep for default.ida
> in your http access log
 
>  grep -i default.ida access_log  | wc -l

If your interested in the connections and have a server in the wild thats not running a
webserver you could try something like:
nc -l -p 80 >> httpconnects

Did anyone get lynched for mentioning grep on London PM? ;)

	Dean
-- 
Profanity is the one language all programmers understand
   --- Anon

-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug




More information about the GLLUG mailing list