Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 30 Jan 1999 20:08:35 +1030
From:      Greg Lehey <grog@lemis.com>
To:        Divideby0 <b99044@lums.edu.pk>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: finger
Message-ID:  <19990130200835.D8473@freebie.lemis.com>
In-Reply-To: <Pine.BSF.3.96.990130140707.2984A-100000@ravi.lums.edu.pk>; from Divideby0 on Sat, Jan 30, 1999 at 02:09:48PM %2B0500
References:  <Pine.BSF.3.96.990130140707.2984A-100000@ravi.lums.edu.pk>

next in thread | previous in thread | raw e-mail | index | archive | help
On Saturday, 30 January 1999 at 14:09:48 +0500, Divideby0 wrote:
>
> 	is there anyway for me to find out the identity of the person
> fingering me or trace the finger ... could someone also point out how the
> finger deamon works or where i could look up the info

Well, you can't find the user (unless he's local), but you can find
the system with tcpdump.  For example, if you're using Kernel ppp, you
might enter:

#tcpdump -i ppp0 port finger
tcpdump: listening on ppp0
20:06:09.127181 freefall.FreeBSD.ORG.1094 > freebie.lemis.com.finger: S 475004960:475004960(0) win 16500 <mss 1460,nop,wscale 0,nop,nop,timestamp 3551 0> (DF)
20:06:09.127295 freebie.lemis.com.finger > freefall.FreeBSD.ORG.1094: S 3881020639:3881020639(0) ack 475004961 win 17376 <mss 1460,nop,wscale 0,nop,nop,timestamp 1563965 3551> (DF)
20:06:09.637741 freefall.FreeBSD.ORG.1094 > freebie.lemis.com.finger: P 1:7(6) ack 1 win 17376 <nop,nop,timestamp 3552 1563965> (DF)
20:06:09.722565 freebie.lemis.com.finger > freefall.FreeBSD.ORG.1094: . ack 7 win 17370 <nop,nop,timestamp 1563966 3552> (DF)
20:06:09.895732 freebie.lemis.com.finger > freefall.FreeBSD.ORG.1094: . 1:1449(1448) ack 7 win 17376 <nop,nop,timestamp 1563966 3552> (DF)
20:06:09.896086 freebie.lemis.com.finger > freefall.FreeBSD.ORG.1094: . 1449:2897(1448) ack 7 win 17376 <nop,nop,timestamp 1563966 3552> (DF)
20:06:11.119907 freefall.FreeBSD.ORG.1094 > freebie.lemis.com.finger: . ack 1449 win 17376 <nop,nop,timestamp 3554 1563966> (DF)
20:06:11.119990 freebie.lemis.com.finger > freefall.FreeBSD.ORG.1094: FP 2897:2928(31) ack 7 win 17376 <nop,nop,timestamp 1563969 3554> (DF)
20:06:11.523945 freefall.FreeBSD.ORG.1094 > freebie.lemis.com.finger: . ack 2897 win 17376 <nop,nop,timestamp 3555 1563966> (DF)
20:06:11.622928 freefall.FreeBSD.ORG.1094 > freebie.lemis.com.finger: . ack 2929 win 17345 <nop,nop,timestamp 3556 1563969> (DF)
20:06:11.631939 freefall.FreeBSD.ORG.1094 > freebie.lemis.com.finger: F 7:7(0) ack 2929 win 17376 <nop,nop,timestamp 3556 1563969> (DF)
20:06:11.631985 freebie.lemis.com.finger > freefall.FreeBSD.ORG.1094: . ack 8 win 17376 <nop,nop,timestamp 1563970 3556> (DF)

This shows an exchange where I ran the following command on
freefall.FreeBSD.org:

$ finger grog@lemis.com

Greg
--
When replying to this message, please copy the original recipients.
For more information, see http://www.lemis.com/questions.html
See complete headers for address, home page and phone numbers
finger grog@lemis.com for PGP public key

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19990130200835.D8473>