[unisog] Tracking down network offenders

Pete Hickey pete at shadows.uottawa.ca
Thu Dec 20 00:53:14 GMT 2001


On Thu, Dec 20, 2001 at 12:07:05PM +1300, russell wrote:

> Our procedures are very similar to those expounded by Peter, Paul and
> Larry.
> 
> 1/ use argus logs to verify incident.
> 2/ acknowledge or disclaim the incident to the complainant
> 3/ track down offender and either clean up or discipline.

Same here, with one step 0.5 first.  We have a FAQ, "So, you think
you were attacked on port 1214" to take care of our most common
complaint.  
-- 
Pete Hickey               |                         |       VEIWIT
Communication Services    | Pete at mudhead.uottawa.CA |   Makers of transparent
University of Ottawa      |                         |      mirrors for
Ottawa,Ont. Canada K1N 6N5|  (613) 562-5800x1008    |       dyslexics.



More information about the unisog mailing list