[tac_plus] seeing lots of Read -1 bytes from router.example.net , expecting 12

[Asif Iqbal]

On Sat, Jun 2, 2012 at 2:46 AM, Kiss Gabor (Bitman) <kissg at ssg.ki.iif.hu>wrote:

> > Am I experiencing a bug?
> >
> > I am running tac_plus F4.0.4.19
> >
> > I see 110444 of the following type of error in 14 hrs.
> >
> > Jun  1 16:36:27 hlr-tacacs-01 tac_plus[17512]: Read -1 bytes from
> > router.example.net , expecting 12
>
> It seems to be rather an "attack".
>

This is valid traffic, not an attack.


> Somebody continously connect to router.example.net then disconnects.
> The router does the same with your TACACS+ server.
>
> Gabor
>



-- 
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/tac_plus/attachments/20120602/3623a110/attachment.html>