we got a customer that periodically tries to access other network devices (I think he/she gots some good hacking skills since he/she is able to find other customers ip addresses) using ssh or port 8291
I want to prove that is her/his fault by making a script that listens for outgoing ssh/8291 connections.
Basically I want the result of torch command into a variable like:
Code: Select all
:set $test [/tool torch interface=ether1 port=ssh]
:if ($test != 0) do {
/log info "Outgoing ssh connection attempt"
}
thanks