From: Stephanie Chung (stepchung@yahoo.com)
Date: Tue Apr 19 2005 - 16:28:45 EDT
I was notified from the Network engineer that my
server is running SNMP and trying to probe his router,
sees the following log:
Dynamic Log Buffer (100 lines):
Apr 19 07:31:52:I:SNMP Auth. failure, intruder IP:
201.155.35.99
Apr 19 07:31:51:I:SNMP Auth. failure, intruder IP:
201.155.35.99
…
201.155.35.99 is my server’s IP (not real IP). I
checked my server and see /usr/sbin/snmpdm daemon is
running. The network engineer is asking me to exclude
his router (201.155.35.2 – not real) from my server’s
SNMP probes. Have no idea how to do this. Any helps on
this is appreciated. Thanks.
Stephanie
__________________________________
Do you Yahoo!?
Yahoo! Mail - You care about security. So do we.
http://promotions.yahoo.com/new_mail
-- ---> Please post QUESTIONS and SUMMARIES only!! <--- To subscribe/unsubscribe to this list, contact majordomo@dutchworks.nl Name: hpux-admin@dutchworks.nl Owner: owner-hpux-admin@dutchworks.nl Archives: ftp.dutchworks.nl:/pub/digests/hpux-admin (FTP, browse only) http://www.dutchworks.nl/htbin/hpsysadmin (Web, browse & search)
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 11:02:47 EDT