On Mon, 24 May 2004 14:14:36 -0500, nino wrote:

> A girl on our network has complained to our IT admin. that her computer
> has been getting probed by my computer (according to Norton's program).
> I've been able to figure out that it only happens when I play
> America's Army. My log files look like this ... Note, I'm setup as DHCP
> so my IP is probably different now....

<snip logs>

> Can you tell me if this is serious or not? I have shorewall set up and
> also have snort running but I really don't know what the heck I'm doing
> with either :-). Please try to explain as if you are talking to your
> grandmother as IT gibberish doesn't mean too much to me :-)

Its AA looking for servers on the LAN. If the girls firewall is
complaining about this, its broken. The queries are being sent (correctly)
to the networks broadcast address.

Theres a few possible solutions to pursue.

1) Educate the girl in the correct usage of her firewall.
2) Don't play AA.
3) Disable the Lan query stuff in AA (not sure if its possible).

--
-Geoff