Kevin Plummer wrote:
At 09:41 AM 5/16/2006, you wrote:
The owner of the directory and all files and subfolders of the directory are
the user "bb". I placed the telnet variable in the bb-hosts file, fired
it up
so that it would trip the alarm for "telnet" on the html page, and then
once I received an alarm I removed the telnet from the bb-hosts file and
if you goto the following URL you will see that it still shows the alarm
even though the "telnet" is not located in the bb-hosts file.
http://a12.defcon1.org/~bb/bb1.9i-btf/www/
206.106.65.231 a12.defcon1.org # BBNET BBDISPLAY ftp dns ssh smtp
pop3 http://a12.defcon1.org/
206.106.65.225 sr-71.defcon1.org # ftp pop3 smtp dns ssh
http://www.defcon1.org
206.106.65.226 norad.defcon1.org # ftp smtp dns ssh pop3
http://www.nomasweb.com
206.106.65.227 yf-12.defcon1.org # ftp smtp ssh pop3
http://www.burnondemand.com
206.106.65.228 spirit.defcon1.org # ftp pop3 smtp ssh imap
206.106.65.238 DSL_Modem # conn
If I can provide any further information please let me know.
Did you remove the corresponding log in BBVAR/logs?
bye
--
Robert-Andre Croteau BSD,MOTU
Quest Software, Inc. Big Brother, Product Architect
http://www.quest.com/ http://bb4.com/
+1 (514) 238-9374
Si le bonheur ne s'achete pas alors louez le.
--
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
To unsubscribe from this list, or to subscribe to the bb-digest list
send e-mail to mailto:majordomo@bb4.com with unsubscribe bb -and/or-
subscribe bb-digest in the BODY of the message.