[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: IRCNet abuse

On 6/8/05, Evert Meulie <evert@xxxxxxxxxxxx> wrote:
> Just wondering: How do you know your server is used for IRC-abuse?  I
> currently still have 6667 open, but would very much like to know whether
> it's used or abused...?

You could port sniff outbound 6667 ports with tcpdump or ethereal.


Adam Langley                                      agl@xxxxxxxxxxxxxxxxxx
http://www.imperialviolet.org                       (+44) (0)7906 332512
PGP: 9113   256A   CC0F   71A6   4C84   5087   CDA5   52DF   2CB6   3D60