[lug] Tracking Connections

[Kyle Moore]

I have someone who keeps trying anonymous ftp on a couple of our
servers. Syslog gives me the IP they are coming from but what I want to
find out is how they come through our network. I don't have access to
any of the routers' logs. My main concern here is someone is getting
into our network that shouldn't...so I want to verify.

NOTE: I know how horrible ftp is so I don't need any sermons on the
wonders of ssh/scp.

--
Kyle