Re: Activity Monitor: Where's the incoming data going?

Article View: comp.sys.mac.apps

Article #12779

#12779

From: Wes Groleau
Date: Sun, 03 Aug 2008 20:10

30 lines
2458 bytes

Don Bruder wrote:
> And don't be surprised when you find out that something like 3.7 metric 
> buttloads of the incoming data is nothing more or less than bot-net 
> generated spam traffic. 
> 
> I was rather shocked to fire up a packet-sniffer and watch megs upon 
> megs of crap coming in, practically non-stop, with almost all of it 
> consisting of UDP-broadcast packets coming in on the iCal port. Had the 

Perhaps you could benefit with some adjustment of something somewhere.

I just ran tcpdump here for approximately a half-hour.
I filtered out anything sourced on our LAN, so it was
only incoming.

407 items.
164 were nntp
140 were pop3
104 were ??? not IP, probably arp, len 52
(Can't tell because I used awk to only catch size, src/port, dest/port)

-- 
Wes Groleau
-----------

    "Thinking I'm dumb gives people something to
     feel smug about.  Why should I disillusion them?"
                             -- Charles Wallace
                             (in _A_Wrinkle_In_Time_)

Technical Details

Message-ID: <%golk.104$ZV1.97@trnddc07>

Path:

arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!news1.google.com!border1.nntp.dca.giganews.com!border2.nntp.dca.giganews.com!nntp.giganews.com!cyclone1.gnilink.net!spamkiller.gnilink.net!gnilink.net!trnddc07.POSTED!ae6a6c4b!not-for-mail

References:

<siegman-E4BA74.10091903082008@news.stanford.edu> <jollyroger-9126A2.12143803082008@news.individual.net> <_rydnY1XH8vIYQjVnZ2dnUVZ_u2dnZ2d@comcast.com>

Show Full Headers

Complete Article Headers

X-Google-Thread: feb82,1bee9a508ee53d74
X-Google-Thread: 1156c9,1bee9a508ee53d74
X-Google-Thread: fa874,1bee9a508ee53d74
X-Google-Attributes: gidfeb82,gid1156c9,gidfa874,domainid0,public,usenet
X-Google-Language: ENGLISH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!news1.google.com!border1.nntp.dca.giganews.com!border2.nntp.dca.giganews.com!nntp.giganews.com!cyclone1.gnilink.net!spamkiller.gnilink.net!gnilink.net!trnddc07.POSTED!ae6a6c4b!not-for-mail
From: Wes Groleau <groleau+news@freeshell.org>
Reply-To: groleau+nntp@freeshell.org
Organization: Ain't No Organization Here!
User-Agent: Thunderbird 2.0.0.12 (Macintosh/20080213)
MIME-Version: 1.0
Newsgroups: comp.sys.mac.apps,comp.sys.mac.system,ba.internet
Subject: Re: Activity Monitor:  Where's the incoming data going?
References: <siegman-E4BA74.10091903082008@news.stanford.edu> <jollyroger-9126A2.12143803082008@news.individual.net> <_rydnY1XH8vIYQjVnZ2dnUVZ_u2dnZ2d@comcast.com>
In-Reply-To: <_rydnY1XH8vIYQjVnZ2dnUVZ_u2dnZ2d@comcast.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Lines: 30
Message-ID: <%golk.104$ZV1.97@trnddc07>
Date: Sun, 03 Aug 2008 20:10:35 GMT
NNTP-Posting-Host: 71.188.144.44
X-Complaints-To: abuse@verizon.net
X-Trace: trnddc07 1217794235 71.188.144.44 (Sun, 03 Aug 2008 16:10:35 EDT)
NNTP-Posting-Date: Sun, 03 Aug 2008 16:10:35 EDT
X-Original-Bytes: 2187

Reply to Parent Message