Shimomura's home systems were probed, then successfully attacked using something new in Internet attacks, sequence number guessing. Shimomura also works as a security expert, which made his systems both desirable targets for attack, and allows us to understand in detail what happened. Because, unlike most networks, Shimomura was using tcpdump to monitor traffic incoming from his Internet connection, and routinely sent his logs to an offsite location.