Re: QAZ probes from webtv?

[Dan Hollis <goemon () sasami anime net>]

On Tue, 3 Oct 2000, John Fraizer wrote:
> So, Dan's ACL was trapping any TCP traffic destined to 7597 and not just
> TCP SYN?

Yes, although out of 50 million packets, the webtv servers/clients were
the only ones to *consistently* choose 7597 over the span of several days,
at different times of day and night.

I've got better ACLs now.

-Dan