IRCNet abuse

[Adam Langley]

On 6/8/05, Evert Meulie <evert at poboxes.info> wrote:
> Just wondering: How do you know your server is used for IRC-abuse?  I
> currently still have 6667 open, but would very much like to know whether
> it's used or abused...?

You could port sniff outbound 6667 ports with tcpdump or ethereal.


AGL

-- 
Adam Langley                                      agl at imperialviolet.org
http://www.imperialviolet.org                       (+44) (0)7906 332512
PGP: 9113   256A   CC0F   71A6   4C84   5087   CDA5   52DF   2CB6   3D60