Sponsored Content
Top Forums UNIX for Advanced & Expert Users How to find remote IP addresses that applications are scanning them? Post 302924491 by cero on Monday 10th of November 2014 06:50:15 AM
Old 11-10-2014
Hi hce,
a packet sniffer like tcpdump can tell you what IP addresses your machine is trying to connect to. I do not think that you'll be able to figure out what application is doing the scans (at least not with tcpdump) but it may give you a starting point for further investigations.
 

9 More Discussions You Might Find Interesting

1. IP Networking

find computer names from IP addresses?

Arright, here's what I'm trying to do. I want to dig up currently active IP addresses on my subnet, and my present strategy is to ping every address until I find active ones, then ping them more often to verify their status. Next, I want to find the names of the computers associated with those... (1 Reply)
Discussion started by: sladuuch
1 Replies

2. UNIX for Dummies Questions & Answers

error in a remote find

2 AIX servers (AIX 5.3). From local server, I need to manage remote files. But I have some errors with find : # rsh remoteserver find /directory -name filename is OK : I can see the remote file BUT : # rsh remoteserver find /directory -name filename -exec ls -l {} \; fails : I have : find :... (5 Replies)
Discussion started by: annemar
5 Replies

3. UNIX for Advanced & Expert Users

find application that are scanning the network

Hi, I got a alert from network security that one of hpux server is running tcp port scan on the network, this server is running informix server and i am not aware of any application that is scanning the network. what are ways to findout the which application and user is doing the scan? (1 Reply)
Discussion started by: robertngo
1 Replies

4. Shell Programming and Scripting

How to find ip addresses in logfiles?

Hi guys, I need to check a few log files as below to find out whether certain ip addresses is present on these log files. type8code0: ls -alt -rw-r--r-- 1 root other 796219588 Mar 20 02:25 logfile drwxr-xr-x 2 root root 1536 Mar 20 02:00 . -rw-r--r-- ... (3 Replies)
Discussion started by: type8code0
3 Replies

5. AIX

AIX Remote Connect Fail With “No more multiple IP addresses to connect” Error

We have a production server at a client site running AIX. And recently when users are trying to connect to it via telnet, it prompts "No more multiple IP addresses to connect". Can I know what does this error mean? and how to rectify this? Thanks. (2 Replies)
Discussion started by: a_sim
2 Replies

6. Shell Programming and Scripting

Delete characters & find unique IP addresses with port

Hi, I have a file having following content. <sip:9376507346@97.208.31.7:51088 <sip:9907472291@97.208.31.7:51208 <sip:8103742422@97.208.31.7:51024 <sip:9579892841@97.208.31.7:51080 <sip:9370904222@97.208.31.7:51104 <sip:9327665215@97.208.31.7:51104 <sip:9098364262@97.208.31.7:51024... (2 Replies)
Discussion started by: SunilB2011
2 Replies

7. UNIX for Dummies Questions & Answers

Find applications that use openssl

I have a OpenSSL configured in my RHEL machine. I need to find the list of applications that use or depend on OpenSSL. Is it possible to know which application is using the shared library? ldd `which openssl` linux-gate.so.1 => (0x00b3a000) libssl.so.10 => /usr/lib/libssl.so.10... (5 Replies)
Discussion started by: gowtham.varma
5 Replies

8. Shell Programming and Scripting

Script connect to remote server, not find files and exit only from remote server, but not from scrip

I have a script, which connecting to remote server and first checks, if the files are there by timestamp. If not I want the script exit without error. Below is a code TARFILE=${NAME}.tar TARGZFILE=${NAME}.tar.gz ssh ${DESTSERVNAME} 'cd /export/home/iciprod/download/let/monthly;... (3 Replies)
Discussion started by: digioleg54
3 Replies

9. UNIX for Beginners Questions & Answers

How to find the count of IP addresses that belong to different subnets and display the count?

Hi, I have a file with a list of bunch of IP addresses from different VLAN's . I am trying to find the list the number of each vlan occurence in the output Here is how my file looks like 1.1.1.1 1.1.1.2 1.1.1.3 1.1.2.1 1.1.2.2 1.1.3.1 1.1.3.2 1.1.3.3 1.1.3.4 So what I am trying... (2 Replies)
Discussion started by: new2prog
2 Replies
CLAWS-MAIL-CLAMD-PLUGIN(1)				      General Commands Manual					CLAWS-MAIL-CLAMD-PLUGIN(1)

NAME
claws-mail-clamd-plugin -- ClamAV plugin for Claws Mail DESCRIPTION
This manual page documents briefly the claws-mail-clamd-plugin This manual page was written for the Debian distribution because the original program does not have a manual page. claws-mail-clamd-plugin is a plugin (loadable module) for the Claws Mail mailer. This plugin allows scanning of mails using the Clam AntiVirus. Due license restrictions no clamav library is used and it is required that the ClamAV daemon (clamd) is running on some computer, either localhost or a remote one. Mails to be scanned and scanning results will be sent to and received from this daemon using a socket. This also imposes additional requirements for your home folder and Claws Mail resource folder (~/.claws-mail): global executable permission must be given to these folders. USAGE
Before using a plugin you must instruct Claws Mail to load it on startup. For this you must go ``Configuration'' menu on main window toolbar, open ``Plugins...'' dialog, click on the ``Load plugin...'' button and select the plugin file, named clamd.so, and press the ``Open'' button. WARNINGS
Giving global executable permissions to your home and ~/.claws-mail folders allows other users of the machine to browse these folders' con- tent. This may not be what you want. SEE ALSO
chmod (1), claws-mail (1), claws-mail-extra-plugins (1), libarchive-formats (5). AUTHOR
claws-mail-clamd-plugin was written by Michael Rasmussen mir@datanom.net This manual page was written by Ricardo Mones mones@debian.org for the Debian system (but may be used by others). Permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 2 any later version published by the Free Software Foundation. On Debian systems, the complete text of the GNU General Public License can be found in /usr/share/common-licenses/GPL. CLAWS-MAIL-CLAMD-PLUGIN(1)
All times are GMT -4. The time now is 09:23 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy