>> I've also seen it caused by port scanning.
>>
>
> Yes, definitely. Question there might be if that's actually a case when we
> *want* that logging?
Is it possible a user want the log because he/she wants to notice that
the system is being attacked?
--
Tatsuo Ishii
SRA OSS, Inc. Japan
English: http://www.sraoss.co.jp/index_en.php
Japanese:http://www.sraoss.co.jp