🚀 go-pugleaf

In article <jollyroger-9126A2.12143803082008@news.individual.net>,
 Jolly Roger <jollyroger@pobox.com> wrote:

> In article <siegman-E4BA74.10091903082008@news.stanford.edu>,
>  AES <siegman@stanford.edu> wrote:
> 
> > I just started up NT-NewsWatcher on my Airport+DSL-connected MacBook a 
> > few moments ago, noticed that the "?"'s in front of the 26 groups in my 
> > Subscribed Groups window were only very slowly turning into numbers of 
> > new messages, but also observed that the activity light on my DSL modem 
> > was flashing like mad. 
> > 
> > So, I started up Activity Monitor (which I don't normally keep running), 
> > and selected the Network Tab.  The  text at the bottom of AM's window is 
> > showing "Data Received: 93 MB" and climbing steadily; the green line in 
> > the little window to the right of that is pegged at the top of the 
> > window and the text says "Data received/sec" is about 40 kB (which might 
> > be about right for our very marginal DSL connection).
> > 
> > So, how can I tell _where_ this data is going on my HD, or who's sending 
> > it to me?
> > 
> > And, I started up Activity Monitor cold, and the 93+ MB can't possibly 
> > have come in since I started it.  From what starting point does Activity 
> > Monitor measure Data Received? -- and does it somehow keep track even 
> > when it's not Open?
> > 
> > [In the time it took to compose this msg, the Data Received has climbed 
> > to 120 MB . .. ]
> 
> Try this in a terminal window:
> 
>      netstat -a | grep ESTABLISHED

And don't be surprised when you find out that something like 3.7 metric 
buttloads of the incoming data is nothing more or less than bot-net 
generated spam traffic. 

I was rather shocked to fire up a packet-sniffer and watch megs upon 
megs of crap coming in, practically non-stop, with almost all of it 
consisting of UDP-broadcast packets coming in on the iCal port. Had the 
packets been coming in on the email port via TCP, they would have been 
hundreds, if not thousands, of email messages, all variations on a theme 
of "STOP! Your Windows registry is corrupt - go to <some website> and 
get this registry cleaner and these warnings will stop appearing." 

Funny... I don't recall having a Windows registry to be corrupted, never 
mind a need for something to fix it... :) 

And then, there's the strangeness that these emails are being shipped to 
the iCal port. Wazzup with that? :)

-- 
Don Bruder - dakidd@sonic.net - If your "From:" address isn't on my whitelist,
or the subject of the message doesn't contain the exact text "PopperAndShadow"
somewhere, any message sent to this address will go in the garbage without my
ever knowing it arrived. Sorry... <http://www.sonic.net/~dakidd> for more info