[plug] any advice

[Daniel Pittman]

"Jon L Miller" <jlmiller at mmtnetworks.com.au> writes:

> I did a capture on the mailserver and this is what one of the streams
> produced.

[...]

> Question is how I can find which PC this is coming from? using netstat can I
> grep it to show only information that has port 25?

  tcpdump -ni eth0 port 25

Substitute the appropriate network interface, of course, but that will show
one line for each packet to or from a machine on port 25, which is visible on
that network port on the server running it.

Regards,
        Daniel

-- 
✣ Daniel Pittman            ✉ daniel at rimspace.net            ☎ +61 401 155 707
               ♽ made with 100 percent post-consumer electrons