From owner-freebsd-questions Tue Sep 19 5:13:10 2000 Delivered-To: freebsd-questions@freebsd.org Received: from lamborghini.indocyber.com (lamborghini.indocyber.com [202.180.0.86]) by hub.freebsd.org (Postfix) with SMTP id F3C0537B42C for ; Tue, 19 Sep 2000 05:13:06 -0700 (PDT) Received: (qmail 27296 invoked from network); 19 Sep 2000 12:10:31 -0000 Received: from unknown (HELO maverick.indocyber.com) (202.155.43.94) by lamborghini.indocyber.com with SMTP; 19 Sep 2000 12:10:31 -0000 Received: (qmail 446 invoked by uid 1000); 19 Sep 2000 12:12:40 -0000 Date: Tue, 19 Sep 2000 19:12:40 +0700 From: John Indra To: freebsd-questions@freebsd.org Subject: Hunt a nasty program Message-ID: <20000919191240.A355@indocyber.com> Mail-Followup-To: freebsd-questions@freebsd.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-Mailer: Mutt 1.2.5i on FreeBSD 4.1-STABLE i386 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Dear FreeBSD users... I'm suspecting that my system somehow has a program to ``attract'' SYN (as in SYN FLOOD) packet from remote computer. I'd like to hunt and kill the program. I know that it open a connection to certain host, but I don't which file did that. How do I hunt that nasty program? Thanks a lot... Regards, John To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message