Honeypots mailing list archives

Re: ports 1025 and 1026


From: Sushant Sinha <sushant () umich edu>
Date: Mon, 24 Apr 2006 18:59:21 -0400

must be windows messenger service.

I think it should be UDP.

-Sushant.

mat wrote:

the most flows the destination ports has been to 1025 and 1026, but i cant figure out what that is all about. has anyone else seen this? or know of what these ports do? /etc/services says blackjack and calander.... there are no snort allerts, just seems to be lots of activity to those ports...

thanks




Current thread: