Path: utzoo!censor!geac!torsqnt!news-server.csri.toronto.edu!cs.utexas.edu!wuarchive!usc!apple!agate!ucbvax!koko.UUCP!shoshana
From: shoshana@koko.UUCP (Shoshana Abrass)
Newsgroups: comp.sys.sgi
Subject: Yet another strange message in SYSLOG
Message-ID: <9011292219.AA05590@koko.pdi.com>
Date: 29 Nov 90 22:19:55 GMT
Sender: daemon@ucbvax.BERKELEY.EDU
Organization: The Internet
Lines: 15


  Has anyone else seen the following in their SYSLOG, and/or can anyone
  explain it:

  Nov 28 15:28:45 magritte rlogind[5547]: \
	Connection from 99.1.0.63 on illegal port 1257

  This has happened several times, on several hosts, with different port #'s
  and from different remote hosts.  The remote host (99.1.0.63) is a known 
  host on our network. It's possible that our in-house software is doing 
  the wrong thing.... but I don't think we're doing any homegrown rlogin 
  stuff.

  -shoshana
  pdi!shoshana@sgi.com