메세지로그 파일에 포트센트리관련 메세지 질문 입니다.
작성자 정보
- 홍석범 작성
- 작성일
컨텐츠 정보
- 3,075 조회
- 1 댓글
- 0 추천
- 목록
본문
안녕하십니까? 오늘과내일의 홍석범입니다.
포트센트리는 임의의 포트를 대신 리슨하고 있다가 접속 요청시 해당 ip를 차단하는 프로그램인데, 아래 메시지는 이미 21(ftp)/22(ssh)/25(smtp)/53(dns)/80(http)/110(pop3) 등은 이미 정상적인 서비스들이 사용중인 포트이므로 bind 할 수 없다는 의미입니다.
당연한 의미이므로 무시하셔도 됩니다.
감사합니다.
최윤수 님의 글
May 12 17:33:27 www portsentry[2815]: adminalert: Psionic PortSentry 1.0 is starting.
May 12 17:33:27 www portsentry[2821]: adminalert: Going into listen mode on TCP port: 21
May 12 17:33:27 www portsentry[2821]: adminalert: ERROR: could not bind TCP socket: 21. Attempting to continue
May 12 17:33:27 www portsentry[2821]: adminalert: Going into listen mode on TCP port: 22
May 12 17:33:27 www portsentry[2821]: adminalert: ERROR: could not bind TCP socket: 22. Attempting to continue
May 12 17:33:27 www portsentry[2821]: adminalert: Going into listen mode on TCP port: 25
May 12 17:33:27 www portsentry[2821]: adminalert: ERROR: could not bind TCP socket: 25. Attempting to continue
May 12 17:33:27 www portsentry[2821]: adminalert: Going into listen mode on TCP port: 53
May 12 17:33:27 www portsentry[2821]: adminalert: ERROR: could not bind TCP socket: 53. Attempting to continue
May 12 17:33:27 www portsentry[2821]: adminalert: Going into listen mode on TCP port: 80
May 12 17:33:27 www portsentry[2821]: adminalert: ERROR: could not bind TCP socket: 80. Attempting to continue
May 12 17:33:27 www portsentry[2821]: adminalert: Going into listen mode on TCP port: 110
May 12 17:33:27 www portsentry[2821]: adminalert: ERROR: could not bind TCP socket: 110. Attempting to continue
May 12 17:33:27 www portsentry[2821]: adminalert: Going into listen mode on TCP port: 953
May 12 17:33:27 www portsentry[2821]: adminalert: ERROR: could not bind TCP socket: 953. Attempting to continue
May 12 17:33:27 www portsentry[2821]: adminalert: Going into listen mode on TCP port: 3306
May 12 17:33:27 www portsentry[2821]: adminalert: ERROR: could not bind TCP socket: 3306. Attempting to continue
May 12 17:33:27 www portsentry[2821]: adminalert: Going into listen mode on TCP port: 8080
May 12 17:33:27 www portsentry[2821]: adminalert: Going into listen mode on TCP port: 50010
May 12 17:33:27 www portsentry[2821]: adminalert: Going into listen mode on TCP port: 50020
May 12 17:33:27 www portsentry[2821]: adminalert: Going into listen mode on TCP port: 50030
May 12 17:33:27 www portsentry[2821]: adminalert: PortSentry is now active and listening.
May 12 17:33:27 www portsentry[2821]: attackalert: Possible stealth scan from unknown host to TCP port: 21 (accept failed)
May 12 17:33:34 www last message repeated 257440 times
May 12 17:33:34 www login(pam_unix)[2823]: session opened for user root by LOGIN(uid=0)
May 12 17:33:34 www portsentry[2821]: attackalert: Possible stealth scan from unknown host to TCP port: 21 (accept failed)
May 12 17:33:34 www last message repeated 2066 times
이런 메세지가 뜨는데요..
어드민 경고..정확이 무슨 에러인지 지도좀 해주세요 ^^
관련자료
-
이전
-
다음
최윤수님의 댓글
- 최윤수
- 작성일