Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
Subject: Re: Server activity
From: Riley Hassell (rileySPEAKEASY.NET)
Date: Fri Sep 22 2000 - 12:25:58 CDT
- Next message: Kiss: "ipchains in a single machine"
- Previous message: sigippWELLA.COM.BR: "Re: Server activity"
- In reply to: Guoda Rugeviciute: "Server activity"
- Reply: Riley Hassell: "Re: Server activity"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Combination BigBrother Monitoring/Network Ice Products.
Tier 3 - Abuse Mail
Phone : 206-728-9770
Email : rileyspeakeasy.net
On Thu, 21 Sep 2000, Guoda Rugeviciute wrote:
> a rather big network. computers connected like this:
> xxx.xxx.xxx.xxx (real IP)
> | | |
> 192.168.1.X 192.168.1.Y 192.168.1.Z
> All those computers - linux boxes, each of them has from 2 to 8 win
> computers connected.
> How could I monitor the activity of those servers? I mean - how some other
> server xxx.xxx.xxx.xxY could be notified if the server 192.168.2.Z is
> Another problem - suppose a user at his workstation which is connected to
> 192.168.2.Y is doing something I and others don't like (portscan , for
> example) Is it possible to find out which one is doing this? (well, some
> other method than logging almost everything with ipchains and sending
> to some log-server).
> As far as I know the first problem could be easily solved in "real" ip
> situation. But what could be done if all the addreses are local?