January 30th, 2004, 09:31 PM
Blind spoof?
Only one way to find out: fire up tcpdump
January 30th, 2004, 09:13 PM
What about your ISP having a web cache? (random thought on this).
What is running at the particular time of the initial netstat -na? Have you checked processes say using tlist?
I found this...
January 30th, 2004, 07:28 PM
Do you use something like Proximitron?