[90727] in North American Network Operators' Group
Tracing network procedure for stolen computers
daemon@ATHENA.MIT.EDU (Colin Johnston)
Mon Jun 12 15:46:32 2006
Date: Mon, 12 Jun 2006 20:45:44 +0100
From: Colin Johnston <colinj@mx5.org.uk>
To: <nanog@nanog.org>
In-Reply-To: <7.0.1.0.2.20060512014655.022959d8@renesys.com>
Errors-To: owner-nanog@merit.edu
Hi folks,
Quick security tracing question, flame me if you think offnetwork topic.
Earlier this month my daughters Ibook was stolen, oh well that is life I
guess.
Anyway updated mail server software for full debug and IP log since noticed
that mail account was accessed yesterday.
I am now hoping it is access'd again, system was setup to pull each min so
when they(thugs) access internet again hopefully will honeytrap IP number.
What does one do next ? I guess inform police etc but would this be too slow
?? Do I contact ARIN/RIPE contacts direct ??
I know about software that should have been installed for tracing if stolen
but wondered about in the real network world how useful this was and if any
items recovered ??
Colin Johnston
Satsig sysadmin