[lug] eth0: tx interrupt but no status

[D. Stimits]

Paul Bille wrote:
> 
> Dan,
> 
> Thanks for the feed back.
> 
> One clarification, I am on the cudenver.edu domain.  Randy Hagan is my
> sysadmin.
> 
> The rpc.mountd: export request came from 192.207.173.213 j30.engr.subr.edu
> which is Southern University Baton Rouge.  This may or may not be related to
> the "eth0: tx interrupt" stuff
> 
> I interpret the
> > Dec 10 17:54:02 liz fingerd[9511]: rejected @ebille.cudenver.edu
> messages to indicate MY system is rejecting finger request for invalid
> users.  I think someone is looking for usernames.
> 
> > . . . makes me roll my eyes back and laugh . . .
> 
> You're right.  I traced the e-mail address back to a photographer in
> Australia.  He doesn't appear to be a sophisticated user but then what do I
> know?

Use the full header, see if it jives with what the return address and
name say. If it really is him, I'd ask him what he is talking about.
Perhaps someone is spoofing *your* address, which is resulting in the
flooding you are seeing, when machines try to reply or ident.

> 
>         http://www.qldwide.net.au/~garryw/page3.html - Garry Williamson
> 
> I'm not worried about him or the finger request (except in the context of
> username searches) but I am concerned about the "eth0: tx interrupt but no
> status"