Security Incidents: Re: Odd identd behavior

[Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>]

On 2005-11-14 kgp () nethere com wrote:
> Just to reiterate, I'd simply dig or nslookup the ip addresses (or use
> one of the many nslookup webpages) and see if they have some contact
> info.
I'd suggest to use whois instead.

> Really all you care about at this point is passing off some
> information to the admin that it looks like he has some nefarious
> activity on his network. You might also want to give him your ip
> address (and maybe mac) so he can sift your info out of any forensics
> he may do.
MAC address is irrelevant here, since it's only used on the ethernet
segment your box is connected to.

Regards
Ansgar Wiechers
-- 
"Another option [for defragmentation] is to back up your important files,
erase the hard disk, then reinstall Mac OS X and your backed up files."
--http://docs.info.apple.com/article.html?artnum=25668