Security Incidents mailing list archives

Re: udp port 500 scans

From: Jeff <jeff () TCNET ORG>
Date: Thu, 21 Dec 2000 12:06:11 -0500

On Thu, 21 Dec 2000, Blake Frantz wrote:

what is this?  we have been seeing this traffic quite a bit lately.

Wed Dec 20 12:29:02 2000 x.x.x.x/500 -> y.y.y.y/500 udp

[snip]

IPSec IKE. See RFC 2407 and others.

-jeff

--
Jeff Godin
Network Specialist
Traverse Area District Library / Traverse Community Network
jeff () tcnet org

Current thread:

udp port 500 scans Blake Frantz (Dec 21)
- Re: udp port 500 scans Jeff (Dec 21)
- Re: udp port 500 scans Greg Woods (Dec 21)
  - Unknown web log entry - new FrontPage exploit? Michael Katz (Dec 21)
    - Re: Unknown web log entry - new FrontPage exploit? TJ Jablonowski (Dec 22)
  - Re: udp port 500 scans TJ Jablonowski (Dec 21)
- <Possible follow-ups>
- Re: udp port 500 scans Green, Art (MED) (Dec 21)