Article View: comp.sys.mac.apps
Article #12781Re: Activity Monitor: Where's the incoming data going?
From: Don Bruder
Date: Sun, 03 Aug 2008 20:32
Date: Sun, 03 Aug 2008 20:32
37 lines
3031 bytes
3031 bytes
In article <%golk.104$ZV1.97@trnddc07>, Wes Groleau <groleau+news@freeshell.org> wrote: > Don Bruder wrote: > > And don't be surprised when you find out that something like 3.7 metric > > buttloads of the incoming data is nothing more or less than bot-net > > generated spam traffic. > > > > I was rather shocked to fire up a packet-sniffer and watch megs upon > > megs of crap coming in, practically non-stop, with almost all of it > > consisting of UDP-broadcast packets coming in on the iCal port. Had the > > Perhaps you could benefit with some adjustment of something somewhere. Yeah - The main adjustment being nuking the bot-net into so much glow-in-the-dark slag. Lotsa luck with that, though... > > I just ran tcpdump here for approximately a half-hour. > I filtered out anything sourced on our LAN, so it was > only incoming. > > 407 items. > 164 were nntp > 140 were pop3 > 104 were ??? not IP, probably arp, len 52 > (Can't tell because I used awk to only catch size, src/port, dest/port) Yeah, bet on those len 52 packets being either ARP or DHCP traffic. -- Don Bruder - dakidd@sonic.net - If your "From:" address isn't on my whitelist, or the subject of the message doesn't contain the exact text "PopperAndShadow" somewhere, any message sent to this address will go in the garbage without my ever knowing it arrived. Sorry... <http://www.sonic.net/~dakidd> for more info
Technical Details
Message-ID:
<-sKdnZAQk6h5iAvVnZ2dnUVZ_hjinZ2d@comcast.com>Path:
arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!Xl.tags.giganews.com!border1.nntp.dca.giganews.com!nntp.giganews.com!local02.nntp.dca.giganews.com!nntp.comcast.com!news.comcast.com.POSTED!not-for-mailReferences:
<siegman-E4BA74.10091903082008@news.stanford.edu> <jollyroger-9126A2.12143803082008@news.individual.net> <_rydnY1XH8vIYQjVnZ2dnUVZ_u2dnZ2d@comcast.com> <%golk.104$ZV1.97@trnddc07>Show Full Headers
Complete Article Headers
X-Google-Thread: feb82,1bee9a508ee53d74 X-Google-Thread: 1156c9,1bee9a508ee53d74 X-Google-Thread: fa874,1bee9a508ee53d74 X-Google-Attributes: gidfeb82,gid1156c9,gidfa874,domainid0,public,usenet X-Google-Language: ENGLISH,ASCII-7-bit Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!Xl.tags.giganews.com!border1.nntp.dca.giganews.com!nntp.giganews.com!local02.nntp.dca.giganews.com!nntp.comcast.com!news.comcast.com.POSTED!not-for-mail NNTP-Posting-Date: Sun, 03 Aug 2008 15:32:36 -0500 From: Don Bruder <dakidd@sonic.net> Newsgroups: comp.sys.mac.apps,comp.sys.mac.system,ba.internet Subject: Re: Activity Monitor: Where's the incoming data going? Organization: Chaotic Creations Unlimited References: <siegman-E4BA74.10091903082008@news.stanford.edu> <jollyroger-9126A2.12143803082008@news.individual.net> <_rydnY1XH8vIYQjVnZ2dnUVZ_u2dnZ2d@comcast.com> <%golk.104$ZV1.97@trnddc07> User-Agent: MT-NewsWatcher/3.5.2 (PPC Mac OS X) Date: Sun, 03 Aug 2008 13:32:36 -0700 Message-ID: <-sKdnZAQk6h5iAvVnZ2dnUVZ_hjinZ2d@comcast.com> Lines: 37 X-Usenet-Provider: http://www.giganews.com NNTP-Posting-Host: 24.17.116.123 X-Trace: sv3-dN8Zz5qllZka2hxHEBcMXIjKmcted+kVtUlbuNAV2seMdtqRhTykXngccU3fIcLP2dTD6Rq6Hd/XxOJ!JM1MWzehManORUnMxcavDYCBhR0fWtpxVmxjpBEV0YL4ih7gm57146XX7v9OPSg8IhOdK6SHwB3e!ar7ToM15O/jjEw1ixQDavcVZ0kTZ8A== X-Complaints-To: abuse@comcast.net X-DMCA-Complaints-To: dmca@comcast.net X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly X-Postfilter: 1.3.39