Hi Jeff, I changed the subject on here, shoulda done that on my first post since I was changing the topic of the thread.
Weird...its like it should be in CLOSE_WAIT (I think that's what its called), but maybe the NETServer doesn't have a way to designate that state? That would be weird... not sure on this part.
I'ld have thought the same thing. Maybe since I did just clear a bunch of hung telnets the "listens" will eventually clear up on their own. I could probably clear them up by power cycling the box but won't do that since it would disconnect quite a few users :-)
520/udp is RIP routing protocol. Do you have routing turned on for that user?
Now this is what bothers me. Call me paranoid, but I'm always watching out for users doing weird things (or doing things that are against our Acceptable Use Policy). No, I don't have any kind of special routing turned on for any customer, they are all (except for a few ISDN users which this guy is not) normal 56K analog dial-ups authenticating via a standard implementation of Cistron Radius. Now I'm wondering what this guy is up to... (if anything). Lisa Casey, Webmaster Netlink 2000, Inc. lisa@jellico.net