Q: somebody queried and constantly switching ports

[Barry Margolin]

In article <3886E471.FEC6C20B at aster.si>,
Bob Marcan  <bob.marcan at aster.si> wrote:
>challv1 2% tail /var/adm/SYSLOG
>Jan 20 11:10:01 5D:challv1 named[4270]: refused query on non-query
>socket from [172.21.2.50].1635

challv1 is receiving packets on the UDP port that it's using for recursive
queries that don't have the "query reply" flag set.  The cause is difficult
to assess; it could be a port scan of some kind.

-- 
Barry Margolin, barmar at bbnplanet.com
GTE Internetworking, Powered by BBN, Burlington, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.