On Friday, June 21, 2002 4:24 PM, Simoncini, Matthew <Matthew.Simoncini@bsci.com> wrote:
Hi everyone,
I'm constantly getting port scanned from a certain IP address on our internal corporate network. I'd really like to find out where and who this person is, but don't know much outside of ping, traceroute, nslookup, etc .... I was wondering if anyone knows of any tools that can get me more information on this person? This happens to be on our private network, so most internet tools I don't think will help much.
Thanks for your time.
Matthew _______________________________________________ Wlug mailing list Wlug@mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug
With iptables (upgrade to ipchains and so much more sophisticated) installed you can configure it to ignore *any* packet sent from that machine [defining it by IP address or MAC address] -- responding (or not, this case) as if your computer were turned off. Works for me. -- Peter Gutowski <peter@linuxchamps.com> // tel.: (413) 531-0123 "When in company, put not your hands to any part of the body not usually discovered." --George Washington, _Rules for Civility and Decent Behavior_