Printable View
i was just playin around with my brand new portscanner (as i am newbie babe) n i didn't no that alart mails went to IT team (inc me..)
it has my IP add, package dropped etc etc
thanks to employee rights, he is on holiday till the end of mth.
how can i erase the alart police mails + firewall log from my boss's?? help me pleeeeeeeeaaaaase!
Why were you portscanning in the first place? Don't be a coward, confess to what you did. I mean, how bad will they punish you for a lousy portscan?
DOH! praying might help. Anything else would unethical. Just explain the situation when he gets back.
He's probaly a janitor and shouldn't of been touching a computer in the first place.
Louie: Not a janitor, a Mexican lampshade maker ;)
Attempt to tamper with logs and give them more documentation to terminate you instead of disciplining you.
Explain yourself and don't try to cover it up.
Next time be sure what you are doing does not violate any IT policies... In my company, that's a sure way to be forced to find a new job.
Gee, I hope they are not monitoring your internet traffic, so they see you comming on here asking how to delete logs to cover up what you shouldn't have been doing in the first place.
You best bet is to be up front with him. Tell him exactly what you did, and why. Thats about your only option now....
Quote:
that alart mails went to IT team (inc me..)
um...so if you're a legit part of your co's "IT team" (kinda scary to me but that's just me...)...you probably could have some legit reason to do a portscan....I regularily nmap my network...inside and out...makes me feel better...just tell them what and why you did what you did...trying to hide what you did...epsecially if you don't know what you are doing...and obviously you don't...you WILL leave tracks....and covering up will look far worse than "just checking our ports looking for something we missed..."
however...if you are trying to cover up more than you are telling us....well...as the rental car lady said to steve martin in planes trains and automobiles....
"well.....you're fuuuuucked"
:D
And another afterthought - if you're not on the IT team, you probably shouldn't be running anything that would appear to be an attack or preparation for a future attack....
The truth shall set you free....
....and a cover up shall set you free to find a new job
Cute jcmcb.....
Fess up is what I, and almost everyone, here suggests.
Like others said, try covering it up and you'll just dig yourself a deeper grave.....
What was your reason to use a port scanner? Tell us here and we'll let you know if it's a gravedigging reason or a legit security consence reason....
How's that?
If you were just playing around with a port scanner, then I don't see the big deal. If you try to cover it up -> anything that might happen after will be blamed on you. Be open, you'll probably just get a "Alright, just don't do it again" lecture.
well with a little c4 you could eliminate any machine that might have a record of this, including the email server and hope he dosn't get his mail at home.
of you could tell the truth, no law against it really.
If you don't tell him its you how will he find out?
Port scanning is legal. It just seems like a bad thing because it’s usually the first step in not so legal activities. It would be best to tell the truth before he even looks at the logs. Of course you could always suggest that someone else might of hijacked your computer and used it to port scan but good admins will quickly punch holes in your theory and then your in deep Sh*t.
I don't think portscans are illegal. If you just explain to them (and if they are reasonable) I'm sure they'll understand (unless you work with the BOFH)
Others, you're fux0r3d. Sorry :(.
well if ur boss islike 99% of the system admins out there u have nothing to worry about chances are he wont even check them
I was poking around an employers network once....errrr this one particular time... and stummbled onto somones connection to a server on a high port. This particular machine contained customer information.
so I looked deeper to see what was being transfered. I logged what I found and blew the whistle. OOOpps I was brought into a meeting room with IT manager and friends along with HR. I made the IT sup look bad infront of his boss.... He tried to bullshit his way out of what was happening on the network I showed my log's ......then the sup and I were both looking for a job.
Moral of the story is play on your own network or atleast have a reason for playing on anyone elses before hand.
If you do get caught be honest and dont try to bull**** it makes it worse.
Good luck!
Is port scanning really illegal? It seems harmless. I don't think your boss would mind anyway.
I dont know if it is illeagal but it would be considered "bad form" to scan somone elses network. First question will be why as somone aready stated.
I agree with the fact that most admins do not look at this as a threat or even mess with the logs a whole lot unless there is a problem. I would be carful not to continue scanning for some time. Hope you havent visited any exploit sites on the ports you found open.
Port scanning is just as annoing as somone rinning your doorbell over and over and over....
sooner or later you going to get mad about it and crack some skulls but unless it is creating alot of network traffic or locking up a service its harmless to scan.
I guess I stand corrected as port scanning being "harmless".
I'd have to go with most of the people here, if you were just "innocently" port scanning, fess up and take your lumps.
But as a mother of a teen and having been a not so nice teen, chances are you were port scanning for other reasons.
Either way fess up.
I'd have to go with most of the people here, if you were just "innocently" port scanning, fess up and take your lumps.
But as a mother of a teen and having been a not so nice teen, chances are you were port scanning for other reasons.
Either way fess up.
Eugh. Cocoke, I don't think anyone here is going to help you tamper with logs, etc. Even if someone wanted to, you haven't given enough information for them to know where to start, such as the OSes running in the company, how you got the message, what network setup, what software logged it, etc.
Eugh. Cocoke, I don't think anyone here is going to help you tamper with logs, etc. Even if someone wanted to, you haven't given enough information for them to know where to start, such as the OSes running in the company, how you got the message, what network setup, what software logged it, etc.
So you did a port scan. Who cares? IT department managers have better things to do than waste seconds on kiddies with port scanners. The email was probably just meant to scare you. I doubt whether it will even be followed up. If they do follow it up, just say, "yep, it was me, so what?" They will say, "don't do it again". You will say, "ok" and that will be the end of it.Quote:
i was just playin around with my brand new portscanner (as i am newbie babe) n i didn't no that alart mails went to IT team (inc me..)
it has my IP add, package dropped etc etc
Now a portscan is one thing but deleting logs is something else. This crosses the borders into being illegal. It's not even worth contemplating trying to delete some log files just to cover up a port scan. If you get caught trying this, you definitely will get fired. Just be patient and my guess is the whole thing will blow over and will not even be given a mention ;).Quote:
thanks to employee rights, he is on holiday till the end of mth.
how can i erase the alart police mails + firewall log from my boss's?? help me pleeeeeeeeaaaaase!
So you did a port scan. Who cares? IT department managers have better things to do than waste seconds on kiddies with port scanners. The email was probably just meant to scare you. I doubt whether it will even be followed up. If they do follow it up, just say, "yep, it was me, so what?" They will say, "don't do it again". You will say, "ok" and that will be the end of it.Quote:
i was just playin around with my brand new portscanner (as i am newbie babe) n i didn't no that alart mails went to IT team (inc me..)
it has my IP add, package dropped etc etc
Now a portscan is one thing but deleting logs is something else. This crosses the borders into being illegal. It's not even worth contemplating trying to delete some log files just to cover up a port scan. If you get caught trying this, you definitely will get fired. Just be patient and my guess is the whole thing will blow over and will not even be given a mention ;).Quote:
thanks to employee rights, he is on holiday till the end of mth.
how can i erase the alart police mails + firewall log from my boss's?? help me pleeeeeeeeaaaaase!
Thanks guys, i understand i shouldn't cover up,
i will tell him that was me, fessin around when he cums bak...
Cheers mates!
xxx
Thanks guys, i understand i shouldn't cover up,
i will tell him that was me, fessin around when he cums bak...
Cheers mates!
xxx
I guess you missed the valuable README file that typically comes with a portscanner... specifically the part that says, and I quote, "do not scan any machine that you don't expressly have permission to do so, or, if you do, be prepared to deal with any and all repercussions form your actions." (I'm paraphrasing heavily, of course, but it's in there somewhere)Quote:
Originally posted here by cocoke
i was just playin around with my brand new portscanner (as i am newbie babe) n i didn't no that alart mails went to IT team (inc me..)
it has my IP add, package dropped etc etc
thanks to employee rights, he is on holiday till the end of mth.
how can i erase the alart police mails + firewall log from my boss's?? help me pleeeeeeeeaaaaase!
If your work is really setup well, those logs might be written to your firewall, the policy manager and maybe one or more loghosts... possibly even burned to CD (it certainly would seem to have hit mail, so there's probably a "permanent" record of the scan). So, you might be screwed - hope you have your resume updated (me, I've even enjoyed the pleasure of walking people like you out of a company, sometimes right in to the back of a police car - though, granted those are a little more extreme cases).
Yeah, maybe I'm being a bit "extreme" - but, hey... that's part of my job - I'm paranoid, remember?
About the best thing you can probably do is say "Hey, this portscan was me" and "I was trying to do this by doing so" and hope it all comes out in the wash.
In any case, g'luck t'ya. At least you got one thing right... n00b.
*chuckle*
My apologies to all for the (over?)use of bold - but some people just don't seem to get it (and yeah, I'm probably in a slightly bad mood - less than 24hrs before a code deadline that I feel like I'm not going to make at this rate).
I guess you missed the valuable README file that typically comes with a portscanner... specifically the part that says, and I quote, "do not scan any machine that you don't expressly have permission to do so, or, if you do, be prepared to deal with any and all repercussions form your actions." (I'm paraphrasing heavily, of course, but it's in there somewhere)Quote:
Originally posted here by cocoke
i was just playin around with my brand new portscanner (as i am newbie babe) n i didn't no that alart mails went to IT team (inc me..)
it has my IP add, package dropped etc etc
thanks to employee rights, he is on holiday till the end of mth.
how can i erase the alart police mails + firewall log from my boss's?? help me pleeeeeeeeaaaaase!
If your work is really setup well, those logs might be written to your firewall, the policy manager and maybe one or more loghosts... possibly even burned to CD (it certainly would seem to have hit mail, so there's probably a "permanent" record of the scan). So, you might be screwed - hope you have your resume updated (me, I've even enjoyed the pleasure of walking people like you out of a company, sometimes right in to the back of a police car - though, granted those are a little more extreme cases).
Yeah, maybe I'm being a bit "extreme" - but, hey... that's part of my job - I'm paranoid, remember?
About the best thing you can probably do is say "Hey, this portscan was me" and "I was trying to do this by doing so" and hope it all comes out in the wash.
In any case, g'luck t'ya. At least you got one thing right... n00b.
*chuckle*
My apologies to all for the (over?)use of bold - but some people just don't seem to get it (and yeah, I'm probably in a slightly bad mood - less than 24hrs before a code deadline that I feel like I'm not going to make at this rate).
You should be ok. Just tell the truth and you may only get a warning or a repremand in your file.Quote:
Originally posted here by cocoke
i was just playin around with my brand new portscanner (as i am newbie babe) n i didn't no that alart mails went to IT team (inc me..)
it has my IP add, package dropped etc etc
A very BIG NO! You don't want to do this. A good admin will catch this and you will be catching the door with your backside on the way out. Or worse, look at the pic in my sig. You may get what Bill is getting from Cookie and Tux............ ;)Quote:
thanks to employee rights, he is on holiday till the end of mth.
how can i erase the alart police mails + firewall log from my boss's?? help me pleeeeeeeeaaaaase!
IT would probably be in your best interest to speak to him before he checks his email. Better he finds out diresctly from you than an automated email. This will also show some responsibility, and help to not get you canned if that's what's in store...Quote:
Originally posted here by cocoke
Thanks guys, i understand i shouldn't cover up,
i will tell him that was me, fessin around when he cums bak...
I got in trouble with my ISP, when I was new, becuase I didn't know it was bad. I was telnetting and used the portscanner for places to log into. The ISP wasn't even understanding. They shut me off and it took tons of work to let me back on. I hadn't even done anything else. There rules don't even say you can't, they just say no illegal activity. Why didn't they call and explain and say not to do it again. I'm rattling :) My advice like everyone elses, is confess. It is better to confess before he finds out than when he confronts you. You might try somthing like this:
You: Is portscanning illegal by company policy?
Boss: Yes, Why?
You: I'm sorry, but I didn't realize it, and I portscanned our server. I won't do it again.
Then you would would explain why you were portscanning. Of course, if you are lieing to us abou it, it might bring out the fireworks.
Conversation would go like this instead:
You: Please don't FIRE me, I portscanned the network.
Boss: Whats a port scan?
You: Lengthy explanation that is half wrong
Boss: Oh, are you going to bribe me to keep your job.
You: No
Boss: Oh well I think its time for you to take a vacation. Heres a free pink slip.
I got caught scanning the network at the college where i work (i wasn't supposed to be doing so) i found multiple backdoors and told the admins they had a right go at me no thanks or praise for finding the backdoors they didn't even know that the machines could be accessed from there. They have replaced my machine with a 98 (same as students staff use nt both run novell) and installed on my machine is 'S to Infinity' so Big Brother is watchin me constantly. My advice go to work WORK go home PLAY and learn.
Dear pple who replyed to my msg..
Thanks to all ur suggestion, as i didn't cover up, am not in trouble...!
Cheers!
mwah mwah! xx
Good to hear....remember:
"Once you start down the dark path, forever will it dominate your destiny"
Glad to hear it. On the question of whether portscanning is legel, you can figure it this way. It is usually legal, but it is just like caseing a house, there is nothing illegal about looking in peoples windows or peeking through holes in their garage door. You can scout there property. The only thing that can get you are tresspassing laws. Portscanning all though not illegal is like peeking through peoples windows and looking at there own personel privacy.