My friend lives in an apartment building where they have a T1
connection in every bedroom and he was able to go online with his
Toshiba laptop running Windows XP. All of a sudden his Internet
connection doesn't work. We tried connecting another computer into his
connection and that went online so it's not the connection, it has to
be his computer.  When Toshiba's included diagnostic program runs it
tells us that there is a problem with the connection because: A.)
There is no response from the DNS server (c-20) and B.) No response
from the Default gateway (C-24).  His IP address is 10.255.101.12, his
subnet mask is 255.255.255.0,  his default gateway is 10.255.101.1 and
his DNS is 192.168.100.1 with an alternate of 205.232.34.1.  His
connection is from a Realtec RTL8139/810x Fam and that appears to be
working fine because it gives us the IP address.  I ran HiJack this
and here is his log:
Logfile of HijackThis v1.97.7
Scan saved at 9:34:51 PM, on 8/25/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\System32\DVDRAMSV.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\EzButton\CplBTQ00.EXE
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\Program Files\Toshiba Controls\CpRmtKey.EXE
C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\toshiba\ivp\ism\pinger.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\DIGStream\digstream.exe
C:\toshiba\ivp\ism\ivpsvmgr.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\cdilla05.exe
C:\Program Files\AIM\aim.exe
C:\WINDOWS\System32\msconfg.exe
C:\WINDOWS\system32\RAMASST.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Documents and Settings\Logan\Desktop\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://www.toshiba.com/search
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.toshiba.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.toshiba.com
O1 - Hosts: 69.20.16.183 auto.search.msn.com
O1 - Hosts: 69.20.16.183 search.netscape.com
O1 - Hosts: 69.20.16.183 ieautosearch
O1 - Hosts: 69.20.16.183 search.netscape.com
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {79C03BC5-6C55-4B5B-921F-C02B6F1ABD7B} -
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Pribi\Pribi.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} -
C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -
C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus -
{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton
AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE
C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [CplBTQ00] C:\Program Files\EzButton\CplBTQ00.EXE
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [CpRmtKey] "C:\Program Files\Toshiba Controls\CpRmtKey.EXE"
O4 - HKLM\..\Run: [CeEPOWER] C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec
Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [Pinger] c:\toshiba\ivp\ism\pinger.exe /run
O4 - HKLM\..\Run: [EPSON Stylus C84 Series]
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE /P23 "EPSON
Stylus C84 Series" /O6 "USB001" /M "Stylus C84"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [DIGStream] C:\Program Files\DIGStream\digstream.exe
O4 - HKLM\..\Run: [IVPServiceMgr] C:\toshiba\ivp\ism\ivpsvmgr.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint
Manager\ViewMgr.exe
O4 - HKLM\..\Run: [Microsoft Update] msconfg.exe
O4 - HKLM\..\RunServices: [Microsoft Update] msconfg.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [cdilla05] C:\WINDOWS\cdilla05.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Microsoft Update] msconfg.exe
O4 - HKCU\..\Run: [\Pribi.exe] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Pribi\Pribi.exe
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: Real.com (HKLM)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.toshiba.com
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) -
http://software-dl.real.com/03634bee97ecf1e0c105/netzip/RdxIE601.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{8827982B-E0CC-4968-83FB-1B804A9353CA}:
NameServer = 205.232.100.1,192.168.100.1

How can I get him back online???

Start by going to Start--Run and type msconfig and hit enter.
Go to the startup tab.
Uncheck anything that's not crucial to the safe operation of the
machine, which means everything except the virus checker, really.
Make note of everything you uncheck. The list in there will look lots
like your hijack log.
Now restart the machine, allowing it to start in the limited startup mode.
See if you can connect.
If so, add back the items one by one.
If not, it's likely a hardware issue.

I am Dreamboat, and I am not a paid researcher.

Personally it looks like your IP address along with your gateway's IP
address are both royally incorrect. IP addresses that have 255 in them
are broadcast IP addresses, meaning they send information to every
computer in that network. I've never seen an IP address with 255 in
it, but then again router companies have been doing all sorts of
stupid things with IP addresses as of late so I guess it could be
right. That's my first guess though. Try plugging in the other
computer that works and seeing if it gets the same IP address, if so
and it works, then I guess it is okay.

These are the steps I usually take when troubleshooting a network connection issue.

Go to Start->Run
Type cmd (hit enter)
In the window that opens try to ping your gateway by ip address
-If that works, try pinging your dns server by address (ping 10.255.101.1)
-If you can't ping your gateway, then you can't get on the internet,
since all internet traffic goes through the gateway. Try calling your
apartment's tech support.

-If you can ping your dns server (either one), then try to ping a
website like www.yahoo.com.
--If that works, then open a browser and try to connect to
www.yahoo.com. If that works then you're on the internet.
--If that doesn't work, then I'd uninstall TCP/IP stuff and reinstall
it cuz maybe your winsock data got messed up.

-If you can't ping your dns server, then try to ping 4.2.2.1 (an
external DNS server).
--If you can ping that, then you can connect to the Internet but you
don't have a DNS server you can connect to. Call your ISP or tech
support and ask for a working DNS server's IP address.
--If you can't ping it, then something is happening between the
gateway and the internet, which is your ISP's problem. Call them.

to moocowjuice... how exactly do you ping a connection?

My friend talked to LightLink and they said that when he tries to
access the internet his computer is opening like 200 connections.

They want money and him to bring his computer to them to fix it.

You have a number of issues here:

1.)  The IP address you gave is not valid.  Your operating system
should not even let you type this in!

2.)  You have a number of questionable programs.  For example
"MSCONFG.EXE" is similar to "MSCONFIG.EXE" which is a valid program. 
However, "MSCONFG.EXE" is most likely the SDBot virus.

I would start things off with a good virus scanner as that it the
first of your problems.

Good luck!

-- CptnSbaitso

Hey, I ran Stinger and AVG 6.0 and cleared the system of all the
viruses it found and I manually deleted the MSCONFG.exe program. 
Here's my new HiJack This log:

Logfile of HijackThis v1.97.7
Scan saved at 5:42:07 PM, on 9/6/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\System32\DVDRAMSV.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\EzButton\CplBTQ00.EXE
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\Program Files\Toshiba Controls\CpRmtKey.EXE
C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\toshiba\ivp\ism\pinger.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\DIGStream\digstream.exe
C:\toshiba\ivp\ism\ivpsvmgr.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\System32\rundll32.exe
C:\WINDOWS\System32\SahAgent.exe
C:\WINDOWS\cdilla05.exe
C:\Program Files\AIM\aim.exe
C:\WINDOWS\System32\nvrszht.exe
C:\WINDOWS\system32\RAMASST.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\Logan\Desktop\HijackThis\HijackThis.exe
C:\Documents and Settings\Logan\Desktop\HijackThis\HijackThis.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Messenger\msmsgs.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://www.toshiba.com/search
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.toshiba.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.toshiba.com
R3 - URLSearchHook: IncrediFindBHO Class -
{5D60FF48-95BE-4956-B4C6-6BB168A70310} -
C:\PROGRA~1\INCRED~1\BHO\INCFIN~1.DLL (file missing)
O1 - Hosts: 69.20.16.183 auto.search.msn.com
O1 - Hosts: 69.20.16.183 search.netscape.com
O1 - Hosts: 69.20.16.183 ieautosearch
O1 - Hosts: 69.20.16.183 search.netscape.com
O1 - Hosts: 12.129.205.209 search.netscape.com12.129.205.209
sitefinder.verisign.com
O2 - BHO: (no name) - {00000EF1-0786-4633-87C6-1AA7A44296DA} -
C:\WINDOWS\System32\ATPART~1.DLL (file missing)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {2E65A557-173C-4DE9-860B-28FC5CACA542} -
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Setup\Setup.dll
O2 - BHO: (no name) - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} -
C:\Program Files\NewDotNet\newdotnet3_88.dll
O2 - BHO: NavErrRedir Class - {5D60FF48-95BE-4956-B4C6-6BB168A70310} -
C:\PROGRA~1\INCRED~1\BHO\INCFIN~1.DLL (file missing)
O2 - BHO: (no name) - {82315A18-6CFB-44a7-BDFD-90E36537C252} -
C:\Program Files\QuickSearch\QuickSearchBar1_27.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} -
C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -
C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus -
{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton
AntiVirus\NavShExt.dll
O3 - Toolbar: QuickSearch Search Bar -
{82315A18-6CFB-44a7-BDFD-90E36537C252} - C:\Program
Files\QuickSearch\QuickSearchBar1_27.dll

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE
C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [CplBTQ00] C:\Program Files\EzButton\CplBTQ00.EXE
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [CpRmtKey] "C:\Program Files\Toshiba Controls\CpRmtKey.EXE"
O4 - HKLM\..\Run: [CeEPOWER] C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec
Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [Pinger] c:\toshiba\ivp\ism\pinger.exe /run
O4 - HKLM\..\Run: [EPSON Stylus C84 Series]
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE /P23 "EPSON
Stylus C84 Series" /O6 "USB001" /M "Stylus C84"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [DIGStream] C:\Program Files\DIGStream\digstream.exe
O4 - HKLM\..\Run: [IVPServiceMgr] C:\toshiba\ivp\ism\ivpsvmgr.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint
Manager\ViewMgr.exe
O4 - HKLM\..\Run: [New.net Startup] rundll32
C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,NewDotNetStartup
O4 - HKLM\..\Run: [updater] C:\Program Files\Common files\updater\wupdater.exe
O4 - HKLM\..\Run: [SAHAgent] C:\WINDOWS\System32\SahAgent.exe
O4 - HKLM\..\RunServices: [Microsoft Update] msconfg.exe
O4 - HKCU\..\Run: [cdilla05] C:\WINDOWS\cdilla05.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [nvrszht] C:\WINDOWS\System32\nvrszht.exe
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Real.com (HKLM)
O10 - Hijacked Internet access by New.Net
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.toshiba.com
O16 - DPF: {1D0D9077-3798-49BB-9058-393499174D5D} - file://c:\counter.cab

Even with all the virus removed, LightLink keeps putting my computer
in "jail". They said I have too many simultaneous open source
connections. Here's my "jail" log.

LIGHTLINK INTERNET
QUARANTINE
Contact Us (607) 277-0959
Mon Sep 6 17:40:45 EDT 2004 
192.168.101.188 -- 00:02:3f:82:ad:3d

--------------------------------------------------------------------------------


WHY I WAS JAILED?
conntrack: Too many simultaneous open source connections 1305 
1321 open connections

README FIRST, JAIL FAQ

CONNECTIONS AT TIME OF JAILING

WINDOWS UPDATE

ONLINE VIRUS AND SECURITY CHECK

AD-AWARE SPYBOT REMOVAL

GET ME OUT OF JAIL!


Your jail record for today
Jail: 20040906 132701 192.168.101.188 00:02:3f:82:ad:3d 1450
 Jail: 20040906 133500 192.168.101.188 00:02:3f:82:ad:3d 1258
 Jail: 20040906 133600 192.168.101.188 00:02:3f:82:ad:3d 1688
 Jail: 20040906 133700 192.168.101.188 00:02:3f:82:ad:3d 1683
 Jail: 20040906 134201 192.168.101.188 00:02:3f:82:ad:3d 1152
 Jail: 20040906 135401 192.168.101.188 00:02:3f:82:ad:3d 1082
 Jail: 20040906 141101 192.168.101.188 00:02:3f:82:ad:3d 1168
 Jail: 20040906 141201 192.168.101.188 00:02:3f:82:ad:3d 2201
 Jail: 20040906 141301 192.168.101.188 00:02:3f:82:ad:3d 1546
 Jail: 20040906 141400 192.168.101.188 00:02:3f:82:ad:3d 1425
 Jail: 20040906 141500 192.168.101.188 00:02:3f:82:ad:3d 1885
 Jail: 20040906 141801 192.168.101.188 00:02:3f:82:ad:3d 1002
 Jail: 20040906 142300 192.168.101.188 00:02:3f:82:ad:3d 1411
 Jail: 20040906 142401 192.168.101.188 00:02:3f:82:ad:3d 2259
 Jail: 20040906 142501 192.168.101.188 00:02:3f:82:ad:3d 1602
 Jail: 20040906 142600 192.168.101.188 00:02:3f:82:ad:3d 772
 Jail: 20040906 142700 192.168.101.188 00:02:3f:82:ad:3d 714
 Jail: 20040906 142801 192.168.101.188 00:02:3f:82:ad:3d 944
 Jail: 20040906 142901 192.168.101.188 00:02:3f:82:ad:3d 1543
 Jail: 20040906 143001 192.168.101.188 00:02:3f:82:ad:3d 2014
 Jail: 20040906 143101 192.168.101.188 00:02:3f:82:ad:3d 1880
 Jail: 20040906 143201 192.168.101.188 00:02:3f:82:ad:3d 1794
 Jail: 20040906 161001 192.168.101.188 00:02:3f:82:ad:3d 1418
 Jail: 20040906 161100 192.168.101.188 00:02:3f:82:ad:3d 2237
 Jail: 20040906 161200 192.168.101.188 00:02:3f:82:ad:3d 1499
 Jail: 20040906 161300 192.168.101.188 00:02:3f:82:ad:3d 1551
 Jail: 20040906 161401 192.168.101.188 00:02:3f:82:ad:3d 2072
 Jail: 20040906 161501 192.168.101.188 00:02:3f:82:ad:3d 2028
 Jail: 20040906 161601 192.168.101.188 00:02:3f:82:ad:3d 2191
 Jail: 20040906 161701 192.168.101.188 00:02:3f:82:ad:3d 2039
 Jail: 20040906 161901 192.168.101.188 00:02:3f:82:ad:3d 1257
 Jail: 20040906 162000 192.168.101.188 00:02:3f:82:ad:3d 1325
 Jail: 20040906 162101 192.168.101.188 00:02:3f:82:ad:3d 764
 Jail: 20040906 162301 192.168.101.188 00:02:3f:82:ad:3d 840
 Jail: 20040906 162400 192.168.101.188 00:02:3f:82:ad:3d 1757
 Jail: 20040906 162501 192.168.101.188 00:02:3f:82:ad:3d 1977
 Jail: 20040906 162601 192.168.101.188 00:02:3f:82:ad:3d 2048
 Jail: 20040906 162701 192.168.101.188 00:02:3f:82:ad:3d 1667
 Jail: 20040906 163101 192.168.101.188 00:02:3f:82:ad:3d 1305