[clug] wierd messages in the syslog

[Martin Pool]

On 26 Apr 2004, Joel Pearson <pearj at writeme.com> wrote:
> Hey,
> 
> Thanks for the suggestions, it turns out this error was fairly regular
> rougly every 15 minutes.  So I got ethereal to monitor the traffic around
> about the time the error shows up and it turns out samba is broadcasting
> itself to all the interfaces, including the internet one.  So I added an
> interfaces = eth1 to the samba conf, and the errors seem to have gone away.

If you're worrying about stuff like this it might also be interesting
to run Snort.  It does a bit more interpretation than Ethereal.  On
the other hand it generates a lot of noise on an internet-connected
machine, and it might itself have vulnerabilities.  It is interesting
to play with though.

-- 
Martin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.samba.org/archive/linux/attachments/20040426/cebbc91f/attachment.bin