Intrusion Question

[Davor_7]

Hi experts,

i tested to try failed login more than 40 times and i see that the expired time is 14:14.
but when i check it on 15:00, the time became to be 16:44

why???

Davor> sh intrusion
Intrusion Type Count Expiration Source
--------- ---- ----- ---------- ------
NETWORK INTRUDER 43 17-NOV-2005 14:14:13.68 DESK.com::TELNET_AC105138


Davor> sh intrusion
Intrusion Type Count Expiration Source
--------- ---- ----- ---------- ------
NETWORK SUSPECT 43 17-NOV-2005 16:44:13.91 DESK.com::TELNET_AC105138

[Wim Van den Wyngaert · Accepted solution]

Because it changed from intruder to suspect on 14:14. So it still remembers the underlying intrussions.

Wim

[Davor_7]

oh~ i have been aware of this is a fool question...
sorry but thanks :)