How can I know there is someone connecting to my router?

[HaoDr]

Hi all,

Please tell how I can find out someone who is accessing to my router ( for example, telnet or ping ...). And how can I disconnect he/she from this existing connection.
( Previously, my router was attacked by ping storm of people from outside, but I didn't know how to disconnect them and it makes my router run very slowly !!! )

Thanks in advance for your help.

Hao Dr

 

[bobthecat]

Hello Hao, you could use a syslog and point your logging to the address of the syslog server.

(1) Start by getting hold of a some syslog software:

http://support.3com.com/software/utilities_for_windows_32_bit.htm

(2) Then install it on your PC and run it up.

(3) Telnet to the router and get to the global config prompt, then enter "logging (your PC's IP)"

(4) you will then have to set what traps to send to the syslog, from the router type logging trap ?
you can then select what level of logging is sent to your PC.

<0-7> Logging severity level
alerts Immediate action needed (severity=1)
critical Critical conditions (severity=2)
debugging Debugging messages (severity=7)
emergencies System is unusable (severity=0)
errors Error conditions (severity=3)
informational Informational messages (severity=6)
notifications Normal but significant conditions (severity=5)
warnings Warning conditions (severity=4)


I'm not to sure about which report telnet session but I would guess Informational (6) would do the trick.
I would be interested in any others who have tried to collect info on attempted logins.



Bob ^^