Honeypots mailing list archives

Re: ports 1025 and 1026


From: ilaiy <ilaiy.e () gmail com>
Date: Mon, 24 Apr 2006 16:30:30 -0500

It could be anything .. Take a look at what the destination IP is and
see if you have any strange activity on the machine ..

./thanks
ilaiy

On 4/24/06, mat <mr () simla colostate edu> wrote:
the most flows the destination ports has been to 1025 and 1026, but i
cant figure out what that is all about.  has anyone else seen this? or
know of what these ports do? /etc/services says blackjack and
calander.... there are no snort allerts, just seems to be lots of
activity to those ports...

thanks



Current thread: