Snort mailing list archives
RE: Strange UDP Packets
From: "Ben Vaughn" <bvaughn () BlackbirdTech com>
Date: Tue, 26 Feb 2002 09:25:23 -0500
Jason, Find out which host on your internal network is emanating the these packets and use a netstat,lsof,sockstat,ps aux equivalent to find out the tools that are running on the host. If you put enough effort in it you should be able to discover which application on the host is sending out these packets. -biv -----Original Message----- From: Jason Robertson [mailto:jason () ifuture com] Sent: Monday, February 25, 2002 10:22 PM To: snort-users () lists sourceforge net Subject: [Snort-users] Strange UDP Packets I have been noticing at regular intervals UDP packets internal.net 47474 -> 255.255.255.255 47474 I have noticed this was asked on the FW-1 mailling list like 2 years ago but there is nothing else on this Jason -- Jason Robertson Now at the Nation Research Council. _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Attachment:
smime.p7s
Description:
Current thread:
- Strange UDP Packets Jason Robertson (Feb 25)
- Re: Strange UDP Packets Mipam (Feb 25)
- Re: Strange UDP Packets Jason Robertson (Feb 28)
- <Possible follow-ups>
- RE: Strange UDP Packets Ben Vaughn (Feb 26)
- Re: Strange UDP Packets Mipam (Feb 25)