Re: [Full-disclosure] repeated port 21 attempts

["Matt Venzke" <mvenzke@xxxxxxxxx>]

Try websnarf:  http://www.unixwiz.net/tools/websnarf-1.04

Set the port to 21 & log some of the data they're sending.  You can
have it log the session to a file, too, I think.  Note that the one
line it grabs may not amount to much of anything, but it might give
you some idea what the machines are trying to do.

- Matt

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/