[just joined the list, so i don't have the latest] we received a call from our provider noc today indicating their links were saturated as a result of one of our hosts. we tracked it down to a "talk" program that had been running for 1.5 days (the noc only indicated about 4 hours of the intense activity when they called). it looked legit with no obvious malicious intentions (we didn't find any questionable looking programs such as "flash" or "talk" ) : xxxxx 814 34.8 0.4 84 252 ? R Nov 6336:04 talk aakhtar orion.it.lu c.edu anything new on this ? [is there an accessible archive on this list, btw ?] thanks, -eric -- Eric Berggren | "Parts of this product may be derived from Portland State University | from UNIX and Berkeley 4.3 BSD systems..." eric@ee.pdx.edu | -- Label on Solaris 2.x disk