Vger triggering alerts

Vger triggering alerts

[Dale Amon]

Any one have an idea why I'd be getting these snort alerts
from vger mail transactions?

[**] [111:4:1] spp_stream4: WINDOW VIOLATION detection [**]
08/27-01:01:27.806453 199.183.24.194:45473 -> 194.46.0.61:25
TCP TTL:49 TOS:0x0 ID:25963 IpLen:20 DgmLen:74 DF
***AP*** Seq: 0x3DFC914F  Ack: 0xC8CF2D66  Win: 0x16D0  TcpLen: 32
TCP Options (3) => NOP NOP TS: 137819194 96190743 

-- 
------------------------------------------------------
Use Linux: A computer        Dale Amon, CEO/MD
is a terrible thing          Village Networking Ltd
to waste.                    Belfast, Northern Ireland
------------------------------------------------------

Re: Vger triggering alerts

[Tim Walberg]

[-- Attachment #1: Type: text/plain, Size: 1368 bytes --]

I've seen similar from a number of sites. You might want
to run the packets through ethereal or tcpdump or similar
to verify it, but the ones I've investigated have ended up
being ECN packets - seems snort isn't yet smart enough to
understand the ECN extensions to TCP...

				tw


On 08/29/2001 01:50 +0100, Dale Amon wrote:
>>	Any one have an idea why I'd be getting these snort alerts
>>	from vger mail transactions?
>>	
>>	[**] [111:4:1] spp_stream4: WINDOW VIOLATION detection [**]
>>	08/27-01:01:27.806453 199.183.24.194:45473 -> 194.46.0.61:25
>>	TCP TTL:49 TOS:0x0 ID:25963 IpLen:20 DgmLen:74 DF
>>	***AP*** Seq: 0x3DFC914F  Ack: 0xC8CF2D66  Win: 0x16D0  TcpLen: 32
>>	TCP Options (3) => NOP NOP TS: 137819194 96190743 
>>	
>>	-- 
>>	------------------------------------------------------
>>	Use Linux: A computer        Dale Amon, CEO/MD
>>	is a terrible thing          Village Networking Ltd
>>	to waste.                    Belfast, Northern Ireland
>>	------------------------------------------------------
>>	-
>>	To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
>>	the body of a message to majordomo@vger.kernel.org
>>	More majordomo info at  http://vger.kernel.org/majordomo-info.html
>>	Please read the FAQ at  http://www.tux.org/lkml/
End of included message



-- 
twalberg@mindspring.com

[-- Attachment #2: Type: application/pgp-signature, Size: 175 bytes --]

Compressed fs's

[Dale Amon]

Does anyone know what happened to the CBD project?

Or if there is a version of the cloop kernel module
updated to work with 2.4.x?

-- 
------------------------------------------------------
Use Linux: A computer        Dale Amon, CEO/MD
is a terrible thing          Village Networking Ltd
to waste.                    Belfast, Northern Ireland
------------------------------------------------------

Re: Compressed fs's

[Mike Fedyk]

On Mon, Oct 15, 2001 at 10:28:43PM +0100, Dale Amon wrote:
> Does anyone know what happened to the CBD project?
> 
> Or if there is a version of the cloop kernel module
> updated to work with 2.4.x?
>

I believe there was a thread about this a few weeks back.  At that point
there wasn't a version against 2.4 yet...

Mike

Re: Compressed fs's

[Peter Wächtler]

Dale Amon wrote:
> 
> Does anyone know what happened to the CBD project?
> 
> Or if there is a version of the cloop kernel module
> updated to work with 2.4.x?
> 

BCL: block compression layer

http://bcl.tuxia.org/

it does not unload correctly as module

ALERT!!!! Attempt to outlaw open source Operating systems

[Dale Amon]

If you are not aware of the Fritz Hollings bill that
is going into possibly closed hearing in two days, I
think you had all better get on it:

http://www.newsforge.com/article.pl?sid=01/10/19/154624

This bill could make open source operating systems illegal
in the USA.

-- 
------------------------------------------------------
Use Linux: A computer        Dale Amon, CEO/MD
is a terrible thing          Village Networking Ltd
to waste.                    Belfast, Northern Ireland
------------------------------------------------------

Re: ALERT!!!! Attempt to outlaw open source Operating systems

[Alex Buell]

On Tue, 23 Oct 2001, Dale Amon wrote:

> http://www.newsforge.com/article.pl?sid=01/10/19/154624

Nothing there. Try again.

-- 
Top posters will be automatically killfiled.

http://www.tahallah.demon.co.uk

Re: ALERT!!!! Attempt to outlaw open source Operating systems

[Matti Aarnio]

On Tue, Oct 23, 2001 at 04:16:09PM +0100, Alex Buell wrote:
> On Tue, 23 Oct 2001, Dale Amon wrote:
> > http://www.newsforge.com/article.pl?sid=01/10/19/154624
> Nothing there. Try again.

   It is not complete URL.  Corrected:
    http://www.newsforge.com/article.pl?sid=01/10/19/1546246

/Matti Aarnio

[OT] Re: ALERT!!!! Attempt to outlaw open source Operating systems

[Sven Koch]

On Tue, 23 Oct 2001, Alex Buell wrote:

> On Tue, 23 Oct 2001, Dale Amon wrote:
>
> > http://www.newsforge.com/article.pl?sid=01/10/19/154624
>
> Nothing there. Try again.

I think the URL he wanted to transmit is

http://www.newsforge.com/article.pl?sid=01/10/19/1546246&mode=thread

"SSSCA gets a hearing Oct. 25 -- can it be stopped?"

c'ya
sven

-- 

The Internet treats censorship as a routing problem, and routes around it.
(John Gilmore on http://www.cygnus.com/~gnu/)

Announcing Journaled File System (JFS) release 1.0.3 available

[Steve Best]

Release 1.0.3 of JFS was made available on August 20, 2001.

Drop 41 on August 20, 2001 (jfs-2.2-1.0.3-patch.tar.gz
or jfs-2.4-1.0.3-patch.tar.gz) includes fixes to the
file system and utilities.

Function and Fixes in release 1.0.3

- Fixed compiler warnings in the utilities on 64 bit systems
- Created jfsutils package
- Patch to move from previous release to latest release needs to
  update the version number in super.c
- Jitterbug problems (134,140,152) removing files have been fixed
- Set rc=ENOSPC if ialloc fails in jfs_create and jfs_mkdir
- Fixed jfs_txnmgr.c 775! assert
- Fixed jfs_txnmgr.c 884! assert(mp->nohomeok==0)
- Fix hang - prevent tblocks from being exhausted
- Fix oops trying to mount reiserfs
- Fail more gracefully in jfs_imap.c
- Print more information when char2uni fails
- Fix timing problem between Block map and metapage cache - jitterbug 139
- Code Cleanup (removed many ifdef's, obsolete code, ran code
  through indent) Mostly 2.4 tree
- Split source tree (Now have a separate source tree for 2.2, 2.4,
  and jfsutils)


For more details about JFS, please see the README or changelog.jfs.

Steve
JFS for Linux http://oss.software.ibm.com/jfs