RE: patternmatch for scan

[Daniel Brady <daniel.brady () trintech com>]

3128 is the default port for the squid web cache.  8080 is the port used by
one of the win based proxies (can't remember which one off hand)
Daniel

-----Original Message-----
From: Kenneth_W_Fox () sbphrd com [mailto:Kenneth_W_Fox () sbphrd com]
Sent: Saturday, February 19, 2000 1:56 PM
To: firewall-wizards () nfr net
Subject: patternmatch for scan


Is anyone familiar with an attack or probe which begins or ends with
scanning
only ports 3128 & 8080 on a target box? I've been seeing alot of this lately
in
various places.

Ken