Re: What's on udp/2002 ?

[Jose Nazario <jose () monkey org>]

On Wed, 18 Sep 2002, Guido Van De Velde wrote:

> At least something very interesting, according to our fw logs. Anyone
> any idea ?

uh ... linux slapper/modap worm?

        http://www.cert.org/advisories/CA-2002-27.html
        http://analyzer.securityfocus.com/alerts/020916-Analysis-Modap.pdf

those are the p2p connections between wormnet hosts.

___________________________
jose nazario, ph.d.                     jose () monkey org
                                        http://www.monkey.org/~jose/


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com