🚀 go-pugleaf

l1ngo@copper.denver.colorado.edu (Swift) writes:

>We're running Dynix on a Sequent S81 and are considering methods of
>logging outgoing telnet sessions. We can log which sites connect to
>ours (by putting tcp_wrapper between inetd and the server daemons), but
>we're trying to determine the best way to log users connections
>to other hosts. Frequently, another site might report incidences of
>possible hacking from our site and we'd like to know who's doing it.

Some IP routers have a facility to do packet accounting. For example,
some CISCO models can produce statistics of source/destination host,
number of packets, and number of bytes, for each 30 minute period.
This information has been very useful when our site was under attack,
but also when an attack was launched from one of our systems.

	Wietse Venema