Security Incidents mailing list archives

odd UDP source port 500 dst port 500 traffic


From: fire-eyes <sgtphou () FIRE-EYES YI ORG>
Date: Thu, 22 Mar 2001 13:41:22 -0500

Anyone know what this is? I wasn't able to toss a sniffer up on it.


Mar 22 13:35:42 fire-eyes iplog[389]: UDP: dgram to
tnt1a-111.flint.corecomm.net
 (216.214.82.111):port 500 from x.edu (x):500
(904 data bytes)
Mar 22 13:35:49 fire-eyes iplog[389]: UDP: dgram to
tnt1a-111.flint.corecomm.net
 (216.214.82.111):port 500 from x.edu (x):500
(904 data bytes)
Mar 22 13:35:57 fire-eyes iplog[389]: UDP: dgram to
tnt1a-111.flint.corecomm.net
 (216.214.82.111):port 500 from x.edu (x):500
(904 data bytes)
Mar 22 13:36:42 fire-eyes iplog[389]: UDP: dgram to
tnt1a-111.flint.corecomm.net
 (216.214.82.111):port 500 from x.edu (x):500
(56 data bytes)


http://ns3.clubdreamland.com/~jerky/

 "The things you own, they end up owning you." - Tyler Durden
[eof]


Current thread: