Hi,
I'm getting some entries in the xdm-errors file that I don't understand.
The machine in question is a DS-20 running 4.0F. The entries appear in an
approximate 40 second period: for 20 seconds, there is one entry each
second of the form...
AUDIT: Wed Nov 7 17:36:15 2001: 9851 X: client 5 rejected from IP
xx.xx.xx.xx port nnn
where 9851 is the PID of the X process, xx.xx.xx.xx is the IP address of
the machine where the xdm-errors file is located, and the port number nnn
increments between successive entries but always seems to be a "small"
multiple of 256 (N*256 where N=1 to about 12). This is followed by a
"quiet" interval when there are no entries. Then the cycle repeats with 20
entries as above.... Our other 4 machines in the lab do not have this
problem.
Does this indicate a security breach? Some kind of polling by client...?
Needless to say, this makes the error log file VERY large over time, so I
want to get to the bottom of this...
Will summarize.
Thanks,
Peyton Bland
University of Michigan
Received on Wed Nov 07 2001 - 23:40:03 NZDT