Snort mailing list archives
Re: What is this packet? Going to M$
From: Kenton Smith <ksmith () chartwelltechnology com>
Date: 20 Mar 2003 09:41:56 -0700
My guess is these machines have the auto-update functionality turned on and are calling home. I don't trust Microsoft's updates enough to run this on my network so I have it configured to never check, you may have other policies. Kenton Smith On Thu, 2003-03-20 at 02:20, pauls () utdallas edu wrote:
This is a packet going from a host on our network to port 80 at 207.46.131.156 which is ntservicepack.microsoft.com. I've seen these pretty regularly, and I'm wondering if anyone else is seeing them as well? Appears to me that M$ is taking inventory....... <snip>
Kenton Smith, GSEC Systems Administrator Chartwell Technology Inc. 700, 407 2 St. S.W. Calgary, AB T2P 2Y3 CANADA P 403 261-6619 F 403 237-5816 E ksmith () chartwelltechnology com W www.chartwelltechnology.com ------------------------------------------------------- This SF.net email is sponsored by: Tablet PC. Does your code think in ink? You could win a Tablet PC. Get a free Tablet PC hat just for playing. What are you waiting for? http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- What is this packet? Going to M$ Paul Schmehl (Mar 19)
- Re: What is this packet? Going to M$ Matt Kettler (Mar 19)
- Re: What is this packet? Going to M$ twig les (Mar 20)
- <Possible follow-ups>
- Re: What is this packet? Going to M$ Kenton Smith (Mar 20)